November 9, 2026, 6:51 am | Read time: 2 minutes
Extensions are meant to add practical features to Google Chrome. A study now shows that millions of users have installed programs that redirect search queries through their operators’ servers.
Looking for a guide, converting a PDF file, or using other additional features: Browser extensions can enhance Chrome with practical tools in just a few clicks. However, some programs apparently interfere more with internet usage than many users might realize. The security firm Socket has identified 319 extensions that initially route entered search terms through their operators’ servers.
Overall, the extensions studied reached about 13.4 million users over ten years. According to Socket, the “SecuryBrowse” group was particularly large, with 58 extensions and around 4.9 million users. This included programs with names like “Fire Shield,” “Securify,” and “WatchTower.” Many users found the extensions through advertisements. Providers often used the “Unlisted” feature of the Chrome Web Store, which means the programs do not appear in the store search but remain accessible via a direct link.
How operators profit from search queries
Chrome does indicate during installation if an extension changes the default search engine. However, according to Socket, it is not clear that the search queries initially run through the operators’ servers. They usually end up at Yahoo or Bing. This allows operators to see what users are searching for and earn money when users click on ads.
There is also another potential security risk. Since the operators control where the request is forwarded, they could theoretically direct users to fake websites or harmful downloads. However, Socket has not found any such misuse in the extensions studied. The security researchers explicitly describe this possibility only as a risk.
Also of interest: Google equips Chrome with improved phishing protection
How to remove suspicious extensions
Installed add-ons can be managed in Chrome through the three-dot menu. Under “Extensions” and then “Manage Extensions,” the browser displays an overview of installed programs. Extensions that are unknown or no longer needed can be deleted there with “Remove.” The selection must then be confirmed again.
Afterward, it is advisable to check the set search engine. In the Chrome settings, under “Search engine,” you can verify which provider is set as default. If an unwanted service is still listed, you can set the desired search engine again via “Change.” This also allows you to check if an extension has altered the browser’s search settings.