Fake Chrome extensions routed 13.4 million users' searches through malicious servers

Socket researcher John Tuckner identified 319 extensions with an estimated 13.4 million installs over a decade. The extensions changed Chrome's default search settings and routed search queries through servers controlled by their operators before sending them to Yahoo or Bing. This gave the operators access to the queries and allowed them to earn referral payments.