Microsoft has introduced a new Windows 11 app specifically designed to encourage users to set Bing as their default search engine, even if they have previously selected alternatives. This tool, named Microsoft Recommended Search Settings, is available as an independent 22.2 MB installer called MicrosoftSettings.exe.
App Installation and Functionality
The app is distributed via Microsoft’s official download servers, bypassing Windows Update and the Microsoft Store. Its primary function is to install a Bing extension, prompt users to switch their default search engine, and redirect them to Microsoft Rewards.
According to Windows Latest and Cyber Security News, tester Xeno Panther discovered this executable. Upon installation on a system using Google in Chrome and Brave Search in Brave, users are greeted with a screen labeled “Welcome to Microsoft Recommended Search Settings,” where the Bing option is pre-selected.
Impact on Major Browsers
The text within the app specifies that changes will affect Microsoft Edge, Mozilla Firefox, and Google Chrome. By clicking Accept, a brief setup process concludes with a page redirecting to rewards.bing.com/m365offer in Edge.
The packaging of this initiative should catch the attention of security teams. Microsoft utilizes a WinUI shell with WebView2 and a system-like filename to distribute the app. The Microsoft Bing Homepage & Search extension, which has been available on the Chrome Web Store with approximately five million users, is now being pushed through this Windows-native approach.
User and Browser Reactions
Both Chrome and Brave browsers have measures to interrupt the installation. Chrome alerts users that the extension seeks permissions to modify data on websites, display notifications, and alter homepage and search settings to bing.com. These permissions are similar to tactics used in search-hijacking campaigns.
While Microsoft’s extension is legitimate, it still requires users to grant significant control over their browser settings. Once enabled, it can transform Chrome’s new tab page into a feed filled with MSN content.
Google attempts to revert the changes by prompting users to restore Google Search as the default. Microsoft counters this with a prompt urging users to retain Bing, highlighting the consequences of disabling the extension.
Conclusion and Recommendations
This situation is not a covert takeover, as Microsoft has not indicated automatic distribution of the app. However, users and administrators should be cautious. It is advisable for home users to decline the installation unless they intend to use Bing. System administrators should consider this as a potential policy issue, ensuring unapproved search extensions are blocked in Chrome and applying similar controls in Firefox and Brave.
For optimal security, organizations are encouraged to incorporate threat intelligence into their processes to prevent incidents and enhance response capabilities.
