Google Builds Chrome Defense to Block Search-Hijacking Extensions on 2 Unmanaged Platforms
Updated
Updated · secnews.gr · Aug 3
Google Builds Chrome Defense to Block Search-Hijacking Extensions on 2 Unmanaged Platforms
3 articles · Updated · secnews.gr · Aug 3
Summary
Google is developing a Chrome safeguard that will cancel policy-enforced extension installs on unmanaged Windows and macOS devices when they try to replace the new tab page or default search.
The move targets malware that writes local policy keys to make a personal computer appear enterprise-managed, locking malicious extensions in place and redirecting searches to suspicious sites.
Chrome would record the blocked extension’s ID to avoid repeated downloads, and manually installed extensions could no longer be converted into locked installs through local settings alone.
Enterprise deployments can still override the protection for legitimate work extensions, while devices that lose trusted management may have those extensions removed automatically.
The feature remains under Chromium review and is not yet in stable Chrome; Google plans metrics to measure how often hijack attempts occur and how many installs get blocked.