What is search hijacking?
Search hijacking is when software changes a person's browser settings, such as the default search engine, homepage or new tab page, without clear consent, so their searches pass through a provider that earns from search ads. It is usually delivered by bundled installers, deceptive browser extensions or adware. Users experience it as a search engine they never chose.
Search hijacking exploits the same search syndication economics as arbitrage, but takes the visitor instead of buying one. Legitimate browser extension search monetisation exists: an extension that clearly offers a feature in exchange for changing your search provider. The line is consent and disclosure.
The abusive versions rely on adware bundled with free downloads, extensions that hide their purpose, and malvertising that pushes fake updates. Search engines and browser makers have tightened store policies and syndication terms repeatedly in response. For advertisers, hijacked searches are real people but low value. For users, the fix is removing the unwanted extension and resetting the browser's search settings.