[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fj_H-_uWzzsB-PpEKXxDZLwvKc1En7pRBNx6QS7I0vHE":3},{"article":4,"iocs":31,"watch_terms":35},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":10,"url":11,"image_url":10,"published_at":12,"ingested_at":13,"relevance_score":14,"entities":15,"category_id":16,"category":17,"article_tags":20},"df961006-4638-44ee-8d11-988464c7dcf0","We’ve discovered a massive campaign using 30k-plus hostnames to distribute a #BrowserExtension na...","we-ve-discovered-a-massive-campaign-using-30k-plus-hostnames-to-distribute-a-bro","We’ve discovered a massive campaign using 30k-plus hostnames to distribute a #BrowserExtension named \"OmniBar AI Chat and Search.\" This extension overrides the browser homepage and uses an attacker-controlled domain for #SearchHijacking. Details at https:\u002F\u002Ft.co\u002FDOUfJmqLJl https:\u002F\u002Ft.co\u002FABMMSb9tXj","Security researchers discovered a large-scale campaign distributing a malicious browser extension called \"OmniBar AI Chat and Search\" across over 30,000 hostnames. The extension hijacks browser homepages and redirects searches to attacker-controlled domains for malicious purposes. This represents a significant supply-chain attack targeting browser users through extension distribution networks.",null,"https:\u002F\u002Fx.com\u002FUnit42_Intel\u002Fstatus\u002F2031069363822813372","2026-03-09T18:07:26+00:00","2026-03-15T15:00:06.415692+00:00",8,[],"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":16,"icon":10,"name":18,"slug":19},"Malware","malware",[21,26],{"category":22},{"id":23,"icon":10,"name":24,"slug":25},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":27},{"id":28,"icon":10,"name":29,"slug":30},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[32],{"type":19,"value":33,"context":34},"OmniBar AI Chat and Search","Malicious browser extension used for search hijacking and homepage override",[]]