Over 2 million users Affected with Browser Hijackers

## Executive Summary Cyble Research identified three malicious Chrome extensions (WebSecurerr Browser Protection, UltraSurf Security, and Internet-Start) with combined installs exceeding two million that hijack browser search settings, redirect queries through intermediary domains (go.searchsecurer.com, smartwebfinder.com, internet-start.net), capture search keywords, display ads, and send telemetry to third-party analytics, enabling user tracking, ad fraud, and potential further abuse. The report provides extension IDs, network and code behavior, and remediation recommendations including manual removal and verifying extension authenticity.