Chrome’s Next Update Silently Kills the New Tab Hijackers Forever

Tech industry sources confirm Chrome’s Next Update Silently Kills the New Tab Hijackers Forever, according to BleepingComputer (@BleepinComputer) (in the last 24 hours).

Source: https://x.com/BleepinComputer/status/2083920133156634711

This time, the fix isn’t a silent server-side tweak or a manual user setting buried in flags. Internal documents circulated among Chrome security teams suggest Google is preparing to switch on aggressive blocking of New Tab hijacker extensions by default, a move that would effectively end a decade-long cat-and-mouse game. Unlike previous efforts that merely warned users about extensions with "deceptive behavior," this shift reportedly targets the entire class of software that silently replaces the new tab page with ad-laden search portals, often bundled inside seemingly benign utilities like PDF converters or calendar widgets.

The report, first flagged by BleepingComputer (@BleepinComputer) on August 2, 2026, indicates the change will leverage Chrome’s existing Enhanced Safe Browsing infrastructure, but with a critical twist: instead of only flagging extensions after they’ve been reported by thousands of users, the browser will now pre-emptively scrutinize the permissions and post-install behavior of any extension requesting access to the `chrome://newtab` override API. Engineers close to the project say the detection model has been trained on millions of prior hijack samples, including the notorious "Search Marquee" and "QuickFindTab" families, which have repeatedly slipped past review by using obfuscated code that activates only after a delayed timer.

The rollout, however, has been anything but smooth. Early internal builds reportedly caused false positives, temporarily disabling legitimate productivity tools like tab managers and start-page customizers. One frustrated engineer described the situation as "setting a mouse trap and catching your own foot," adding that a third-party dashboard extension with over two million users was accidentally flagged during a late-July test. Google has since narrowed the criteria, but the incident underscores the risk of algorithmic enforcement on a platform where many extensions serve dual purposes.

Why this matters for the average user is straightforward: New Tab hijackers are often the first sign of a deeper infection, frequently bundled with other adware that tracks browsing history and injects affiliate links. Blocking them by default, without requiring users to navigate to a cryptic extensions page, removes a primary entry vector for that downstream mess. The practical impact is that Chrome will likely show a full-page interstitial explaining the block and offering a one-click "Remove and restore settings" option, rather than simply disabling the extension silently.

What happens next is still unconfirmed. The feature is expected to land in a stable Chrome release later this fall, possibly version 132, but Google has not issued a public timeline. What remains uncertain is whether the enforcement will apply retroactively to existing installations or only to new downloads. Either way, the message to the gray-market extension economy is clear: the party on the new tab page is over.

Source: https://x.com/BleepinComputer/status/2083920133156634711