{
  "name": "How 23 Browser Extensions Silently Monetize ~758,000 Users' Searches",
  "slug": "how-23-browser-extensions-silently-monetize-758000-users-searches",
  "description": "SearchJack represents a coordinated campaign comprising 23 deceptive Chrome browser extensions that silently hijack users' default search engines, redirecting queries through monetization middleware before delivering results. These extensions masquerade as various productivity tools, satellite imagery viewers, maps, and news readers while their actual purpose is generating search affiliate revenue. The campaign affects approximately 758,000 users across 22 unique publishers and leverages at least 8 distinct monetization brokers, primarily routing traffic through Yahoo Hosted Search affiliate programs. The extensions employ manifest-only wrappers using chrome_settings_overrides to hijack search settings, with some implementing runtime obfuscation to evade static analysis. Several extensions feature false privacy claims, anomalous review patterns, and anonymous publishers with fictional corporate identities, enabling operators to monetize user search behavior while maintaining zero accountability.",
  "published": "2026-06-15T14:58:18.731000+00:00",
  "created_at": "2026-06-15T17:46:02.599000+00:00",
  "modified_at": "2026-06-15T15:46:02+00:00",
  "created_at_opencti": "2026-06-15T17:46:02.599000+00:00",
  "author": "AlienVault",
  "confidence": 100,
  "report_types": [
    "threat-report"
  ],
  "labels": [
    "adware",
    "affiliate fraud",
    "browser extension hijacking",
    "chrome extensions",
    "monetization middleware",
    "search hijacking",
    "searchjack",
    "yahoo hosted search"
  ],
  "tags": [
    "2026-06-15",
    "adware",
    "affiliate fraud",
    "browser extension hijacking",
    "chrome extensions",
    "monetization middleware",
    "search hijacking",
    "searchjack",
    "yahoo hosted search"
  ],
  "related_entities": {
    "indicators": [
      {
        "id": "36ce5954-c117-4ef1-bcec-90030d395572",
        "name": "https://oasrchrdr.com?dgd=RD1005461&PCSF=true&q="
      },
      {
        "id": "2fa603b3-8619-4d1d-8701-2dfc264b13b5",
        "name": "search.freshysearch-api.net"
      },
      {
        "id": "22d7708c-6e85-4f98-8498-de9ca5be7b52",
        "name": "https://wanderlustar.com/k?source=7023.139&kw="
      },
      {
        "id": "7ee3ca72-cc71-42d8-8fc4-d9ccb3e6bab3",
        "name": "https://earthapp.net/admin/public/link?q="
      },
      {
        "id": "301ba0ac-dcc3-41f4-a6b8-a17f79dedb0e",
        "name": "https://services.templatesearch-svc.org/search/"
      },
      {
        "id": "6fdcf157-54aa-403a-916f-4b9d2e6e3fac",
        "name": "https://myperfecttab.com/search/?q="
      },
      {
        "id": "5acacec2-9fc2-4c92-a700-76c3fe08941f",
        "name": "https://search.freshysearch-api.net/search/"
      },
      {
        "id": "440d48a8-1f3a-42c4-af73-2de2a64efb0a",
        "name": "https://bestfreemaps.com/search-direction.php?q="
      },
      {
        "id": "a454de32-2f8d-485a-81a2-7b06c0c31fec",
        "name": "https://viewmenuprices.com/auto-suggest/search.php?q="
      },
      {
        "id": "90ab0aed-bc57-41e2-aeeb-ddc8f9a08c6e",
        "name": "https://myvideolibrary.info/search.php?q="
      },
      {
        "id": "a493ddcd-d975-4992-8997-622a8eed163b",
        "name": "https://greatstartapp.com/serp.php?v=1.0.1&id=mccmkaicbneobeclkbloeoopcfeipmio&q="
      },
      {
        "id": "30cd9952-0010-4111-a485-1ac8a7785197",
        "name": "https://nautilus-notes.com/search?q="
      },
      {
        "id": "49326957-ba9e-49d2-8dd8-dc2a6ee6e730",
        "name": "https://searchanything.co/search.html?q="
      },
      {
        "id": "f3b0fc0e-5ce4-43d8-acb3-dcecafc84d6b",
        "name": "https://myfocalfind.com/search?q="
      },
      {
        "id": "476022c7-6c21-499e-bddd-f56ed2ba6e1b",
        "name": "https://searchtoggler.com/ext/search?src=default&q="
      },
      {
        "id": "dc64802c-109c-46a9-aff7-62adc5ed0725",
        "name": "https://freshfruittab.com/search?q="
      },
      {
        "id": "ef4e60a9-a1f2-49ee-85ff-60ac2a8bd9b3",
        "name": "services.templatesearch-svc.org"
      },
      {
        "id": "a4873970-d987-42d1-a5d4-6e27af14d81b",
        "name": "https://s.fusebase-search.com/search?q="
      },
      {
        "id": "b7896351-30b0-4788-a5cf-91f8c9b2b6a3",
        "name": "query.quicksearchtool.com"
      },
      {
        "id": "5627429c-b86d-415e-b4f9-aee6c400cc5e",
        "name": "https://query.quicksearchtool.com/s?query="
      },
      {
        "id": "f541fcb4-72f8-4642-83b0-7fdfa85a7b7a",
        "name": "https://seek.searchthatweb.com?PCSF=true&q="
      },
      {
        "id": "d1e9fdad-1c1d-4ae9-a117-40c59de1f66e",
        "name": "https://search.getbettersearch-api.com/search/"
      },
      {
        "id": "2ad106ee-91ee-4e26-8b1c-31c96dce6750",
        "name": "https://newtab.club/search?q="
      },
      {
        "id": "a4d0a8b8-599b-46af-846f-ce760f8b9904",
        "name": "http://searchtoggler.com/ext/search"
      },
      {
        "id": "b9c79b18-546f-4740-a875-020dd3dd1710",
        "name": "s.fusebase-search.com"
      },
      {
        "id": "b7fed730-fe65-47d5-af83-e101b53d655f",
        "name": "https://loginonlineapp.com/admin/public/link?q="
      },
      {
        "id": "c6725e93-a0db-4e61-9436-ffe04098d80f",
        "name": "search.getbettersearch-api.com"
      },
      {
        "id": "ba5fffd2-d984-4d29-b145-ce5c4f749f9f",
        "name": "https://earth3d.net/admin/public/link?q="
      },
      {
        "id": "4297dd84-4f80-43ff-9b0f-a8177bf52f37",
        "name": "https://bestfreemaps.com/search-earth-de.php?q="
      }
    ],
    "attack_patterns": [
      {
        "id": "e73b317e-ea92-49b4-a45d-051f7279aced",
        "name": "T1213"
      },
      {
        "id": "6ccd4566-e15e-40cf-b7df-4a3f737ce5cd",
        "name": "T1036.005"
      },
      {
        "id": "5c67e5d2-bc85-4ce0-822d-f2f5d3b0ae4e",
        "name": "T1185"
      },
      {
        "id": "7d7ac733-6442-416f-8669-c302dd0843b9",
        "name": "T1036"
      },
      {
        "id": "a72ebeae-8e62-4039-8135-e9c611011fdc",
        "name": "T1573"
      },
      {
        "id": "667462db-9031-48eb-893a-05d35f9330a7",
        "name": "T1056.001"
      },
      {
        "id": "c9ee9b30-ba84-4c24-95e9-e8242d42af3f",
        "name": "T1071.001"
      },
      {
        "id": "196f2a64-c55b-47a6-8e38-beb76ba700b6",
        "name": "T1204.002"
      },
      {
        "id": "09124a92-c11f-4571-b35b-ab0bce6dd081",
        "name": "T1112"
      },
      {
        "id": "743d2e0c-e5d5-4ccb-a6bd-0035c4e88c37",
        "name": "T1176"
      },
      {
        "id": "97d377d8-89c7-48f8-a79f-0f48bd60df74",
        "name": "T1005"
      },
      {
        "id": "0c836307-129e-4ff7-a532-180c633cacba",
        "name": "T1027"
      },
      {
        "id": "b7c6c1ad-f183-4128-8427-3891029c73dc",
        "name": "T1539"
      },
      {
        "id": "52b92395-d3d3-4e05-976a-0fccccfce8d2",
        "name": "T1566.002"
      },
      {
        "id": "5b7c66d1-0466-4ba7-af6f-eb82c2f9d05b",
        "name": "T1033"
      },
      {
        "id": "fe6f2946-a01e-460c-9636-8c48b45dd0e6",
        "name": "T1189"
      },
      {
        "id": "45082a8e-9c79-470e-ad1b-decac7188e8f",
        "name": "T1083"
      },
      {
        "id": "4bbdf41c-817c-448a-9513-aaea6bfbe8b4",
        "name": "T1568"
      },
      {
        "id": "70616b2f-4019-4963-b758-5d9f6f20e201",
        "name": "T1082"
      }
    ],
    "observables": [
      {
        "id": "22df3999-4fb6-481d-8469-6a560bb1efec",
        "name": "query.quicksearchtool.com"
      },
      {
        "id": "ecf17b47-a1e4-4715-9cbc-53dafd537803",
        "name": "services.templatesearch-svc.org"
      },
      {
        "id": "12389d32-ca4a-497c-97fe-95c23c14fdc2",
        "name": "search.getbettersearch-api.com"
      },
      {
        "id": "1510c337-07cf-45c4-9282-7b7109344e06",
        "name": "search.freshysearch-api.net"
      },
      {
        "id": "8d9c07d2-91f5-49cf-85bd-87fe36c12f9e",
        "name": "s.fusebase-search.com"
      },
      {
        "id": "f81e93c8-145d-476a-9b61-424283d4df9b",
        "name": "https://services.templatesearch-svc.org/search/"
      },
      {
        "id": "14efc761-ceb8-4d53-9ecf-4b85a5b84cea",
        "name": "https://nautilus-notes.com/search?q="
      },
      {
        "id": "8f786090-9f9b-44d6-abd8-391011048491",
        "name": "https://myvideolibrary.info/search.php?q="
      },
      {
        "id": "b765c8f4-b846-4da5-aaeb-6d002ecceca6",
        "name": "http://searchtoggler.com/ext/search"
      },
      {
        "id": "0c410dba-77a8-4a6f-81b9-6cab1edc0d78",
        "name": "https://greatstartapp.com/serp.php?v=1.0.1&id=mccmkaicbneobeclkbloeoopcfeipmio&q="
      },
      {
        "id": "64734f7b-6323-4aea-9908-5906afd83389",
        "name": "https://s.fusebase-search.com/search?q="
      },
      {
        "id": "61eda1a6-30c9-4b9e-969c-c6c59d4846b1",
        "name": "https://earthapp.net/admin/public/link?q="
      },
      {
        "id": "1226d799-fc5b-4159-bfe2-bf09911ff13f",
        "name": "https://searchanything.co/search.html?q="
      },
      {
        "id": "ab27eb12-cc42-4f5f-8dda-f6f623ba9756",
        "name": "https://search.freshysearch-api.net/search/"
      },
      {
        "id": "ebdb2ff7-ef85-4aab-a1e5-1a62746c5ab3",
        "name": "https://wanderlustar.com/k?source=7023.139&kw="
      },
      {
        "id": "7ce7eca7-3633-46a7-9cf2-343fcdfd054e",
        "name": "https://earth3d.net/admin/public/link?q="
      },
      {
        "id": "bdd3b551-6d09-4999-adde-1e8d8825ff77",
        "name": "https://myperfecttab.com/search/?q="
      },
      {
        "id": "3938b914-7883-4bea-a4d0-de36ac44f518",
        "name": "https://searchtoggler.com/ext/search?src=default&q="
      },
      {
        "id": "17fe5924-4cab-47ed-a546-e4812cd7d569",
        "name": "https://query.quicksearchtool.com/s?query="
      },
      {
        "id": "9653897a-0cf2-436f-bd86-cab0a10caa44",
        "name": "https://loginonlineapp.com/admin/public/link?q="
      },
      {
        "id": "d9dbaddd-3c39-449b-b0ad-61aa2019db98",
        "name": "https://freshfruittab.com/search?q="
      },
      {
        "id": "374c1a47-5169-43e9-81e7-ac1a57f21eb8",
        "name": "https://seek.searchthatweb.com?PCSF=true&q="
      },
      {
        "id": "920b8aee-1096-41bf-b411-1efa443345f1",
        "name": "https://newtab.club/search?q="
      },
      {
        "id": "22d2138b-809d-442c-bdfe-7511bf0ffb2c",
        "name": "https://myfocalfind.com/search?q="
      },
      {
        "id": "36bc2bec-2446-4e6b-a7c6-3a8b90626d04",
        "name": "https://viewmenuprices.com/auto-suggest/search.php?q="
      },
      {
        "id": "653722cd-c200-47de-813d-b6698c66c0e0",
        "name": "https://oasrchrdr.com?dgd=RD1005461&PCSF=true&q="
      },
      {
        "id": "fa515eda-f6ad-4e14-9c21-d5ebe8ef3970",
        "name": "https://search.getbettersearch-api.com/search/"
      },
      {
        "id": "0fe55263-dda5-42df-b952-e1780b1f5f05",
        "name": "https://bestfreemaps.com/search-earth-de.php?q="
      },
      {
        "id": "f4affd73-8374-4364-9ec9-de99a2f13ddc",
        "name": "https://bestfreemaps.com/search-direction.php?q="
      }
    ],
    "others": [
      {
        "id": "",
        "name": "search.freshysearch-api.net"
      },
      {
        "id": "",
        "name": "services.templatesearch-svc.org"
      },
      {
        "id": "",
        "name": "query.quicksearchtool.com"
      },
      {
        "id": "",
        "name": "s.fusebase-search.com"
      },
      {
        "id": "",
        "name": "search.getbettersearch-api.com"
      }
    ]
  },
  "external_refs": [
    {
      "id": "11d68d2c-9f07-45b0-80a6-c61b5c152f12",
      "standard_id": "external-reference--c8e0e0c8-7cf0-5889-a5a8-5a945328127d",
      "entity_type": "External-Reference",
      "source_name": "AlienVault",
      "description": null,
      "url": "https://otx.alienvault.com/pulse/6a30130a4f8994fe9cb1c31a",
      "hash": null,
      "external_id": "6a30130a4f8994fe9cb1c31a",
      "created": "2026-06-15T17:46:02.512Z",
      "modified": "2026-06-15T17:46:02.512Z",
      "createdById": null
    },
    {
      "id": "fdaa518c-d6b3-4894-bd03-e459c316ef74",
      "standard_id": "external-reference--efda38b8-982c-561b-aca4-d8ba1800d6a1",
      "entity_type": "External-Reference",
      "source_name": "AlienVault",
      "description": null,
      "url": "https://malext.io/reports/SearchJack",
      "hash": null,
      "external_id": null,
      "created": "2026-06-15T17:46:02.539Z",
      "modified": "2026-06-15T17:46:02.539Z",
      "createdById": null
    }
  ]
}