--- title: Malware Campaign Compromises 300,000 Chrome and Edge... description: Over 300,000 Google Chrome and Microsoft Edge users have been compromised by a malware campaign through malicious extensions. These extensions hijack... canonical: https://daily.dev/posts/malware-campaign-compromises-300-000-chrome-and-edge-browsers-with-malicious-extensions-zbjbzmdts twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Malware Campaign Compromises 300,000 Chrome and Edge Browsers with Malicious Extensions | daily.dev og:description: Over 300,000 Google Chrome and Microsoft Edge users have been compromised by a malware campaign through malicious extensions. These extensions hijack... og:url: https://daily.dev/posts/malware-campaign-compromises-300-000-chrome-and-edge-browsers-with-malicious-extensions-zbjbzmdts og:image: https://api.daily.dev/og/posts/zBjbzmdTS.png og:image:alt: Malware Campaign Compromises 300,000 Chrome and Edge Browsers with Malicious Extensions og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Malware Campaign Compromises 300,000 Chrome and Edge Browsers with Malicious Extensions **[Collections](https://daily.dev/sources/collections)** · 2 min read · 1 upvotes · 0 comments ## Summary Over 300,000 Google Chrome and Microsoft Edge users have been compromised by a malware campaign through malicious extensions. These extensions hijack homepages, steal sensitive data, and redirect searches to harmful websites. The malware evades antivirus detection and persists by modifying core browser files and registry keys. Users are advised to manually delete suspicious tasks, reinstall their browsers, and employ robust antivirus software for removal. ## Content # Malware Campaign Compromises 300,000 Chrome and Edge Browsers with Malicious Extensions A sophisticated malware campaign has compromised over 300,000 users of Google Chrome and Microsoft Edge by installing malicious extensions. These extensions are designed to hijack browsers' homepages, steal sensitive browsing data, and redirect users to harmful websites. The campaign is particularly insidious as it evades antivirus detection, making the malware persistent and difficult to remove. ## Method of Infection The infection begins with deceptive software downloads, often advertised on Google. Users are tricked into downloading what appears to be legitimate software from lookalike websites that promote popular applications. Unbeknownst to the users, these downloads install a Trojan malware that subsequently forces the installation of malicious browser extensions. ## Malicious Activities Once installed, the extensions perform several harmful actions: 1. **Homepage Hijacking**: The malicious extensions change the default homepage of the browser to websites controlled by the attackers. 2. **Data Theft**: They steal browsing data, including search queries and other sensitive information, which can be used for further malicious activities or sold on the dark web. 3. **Search Redirection**: The extensions intercept web requests and redirect search queries through attacker-controlled servers, often leading to phishing sites or pages loaded with additional malware. ## Persistence Mechanisms The malware is particularly challenging to remove because it involves modifying core browser files and Windows Registry keys. Additionally, it uses PowerShell scripts to execute further malicious activities, ensuring that it can persist even if the user attempts to remove the extensions manually. ## Removal and Mitigation Affected users need to take stringent measures to remove the malware completely. The steps include: 1. **Manual Deletion**: Users must manually identify and delete suspicious tasks and registry keys linked to the malicious extensions. 2. **Reinstall Browser**: Reinstalling the browser is essential to remove any modified core files. 3. **Antivirus Tools**: Employ effective antivirus software to detect and eliminate residual malware components. ## Conclusion This malware campaign highlights the growing sophistication of cyber threats targeting everyday users. It underscores the need for vigilance, especially when downloading software from the Internet. Users should ensure they source software from official websites and maintain updated security measures to protect against such prevalent threats. ## Similar posts on daily.dev - [Don’t just attend KubeCon \+ CloudNativeCon, Merge Forward your experience\!](https://daily.dev/posts/don-t-just-attend-kubecon-cloudnativecon-merge-forward-your-experience--l0rpp73x8) · CNCF · 1 upvotes · 0 comments - [Announcing H2 2026 KCDs](https://daily.dev/posts/announcing-h2-2026-kcds-m96goajm1) · CNCF · 1 upvotes · 0 comments - [Two months of Open Community Groups](https://daily.dev/posts/two-months-of-open-community-groups-asf52zhbs) · CNCF · 0 upvotes · 0 comments - [CNCF Unveils Schedule for KubeCon \+ CloudNativeCon Europe 2026](https://daily.dev/posts/cncf-unveils-schedule-for-kubecon-cloudnativecon-europe-2026-ikhcoa5cb) · CNCF · 2 upvotes · 0 comments - [CNCF Debuts KubeCon \+ CloudNativeCon Japan 2026 Schedule](https://daily.dev/posts/cncf-debuts-kubecon-cloudnativecon-japan-2026-schedule-xp5pyudub) · CNCF · 1 upvotes · 0 comments --- Tags: [#cyber](https://daily.dev/tags/cyber), [#devtools](https://daily.dev/tags/devtools), [#malware](https://daily.dev/tags/malware), [#microsoft-edge](https://daily.dev/tags/microsoft-edge), [#security](https://daily.dev/tags/security) [View this post on daily.dev](https://daily.dev/posts/malware-campaign-compromises-300-000-chrome-and-edge-browsers-with-malicious-extensions-zbjbzmdts) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Malware Campaign Compromises 300,000 Chrome and Edge Browsers with Malicious Extensions","url":"https://daily.dev/posts/malware-campaign-compromises-300-000-chrome-and-edge-browsers-with-malicious-extensions-zbjbzmdts","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/malware-campaign-compromises-300-000-chrome-and-edge-browsers-with-malicious-extensions-zbjbzmdts"},"datePublished":"2024-08-12T15:05:27.257Z","dateModified":"2026-03-15T03:54:33.544Z","description":"Over 300,000 Google Chrome and Microsoft Edge users have been compromised by a malware campaign through malicious extensions. These extensions hijack...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/fc1584844a8d71f23c15bb4d049b6245?_a=AQAEuiZ","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/fc1584844a8d71f23c15bb4d049b6245?_a=AQAEuiZ","isAccessibleForFree":true,"articleSection":"Collections","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Collections","logo":"https://media.daily.dev/image/upload/s--fk_6ycEi--/f_auto,q_auto/v1780996001/logos/collections?_a=BAMAMiWQ0","url":"https://daily.dev/sources/collections"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/malware-campaign-compromises-300-000-chrome-and-edge-browsers-with-malicious-extensions-zbjbzmdts","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"cyber,devtools,malware,microsoft-edge,security","timeRequired":"PT2M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Collections","item":"https://daily.dev/sources/collections"},{"@type":"ListItem","position":3,"name":"Malware Campaign Compromises 300,000 Chrome and Edge Browsers with Malicious Extensions"}]} ```