Microsoft App Pushes Bing Search to Windows 11 Users, Sparking Privacy Concerns
A new Microsoft application, 'Microsoft Recommended Search Settings,' is prompting Windows 11 users to set Bing as their default search engine, raising concerns about user consent and browser hijacking tactics.
Microsoft has released a new Windows 11 application, dubbed "Microsoft Recommended Search Settings," designed to encourage users to adopt Bing as their default search engine across popular browsers. The standalone executable, named MicrosoftSettings.exe, is available for download from Microsoft's official servers and aims to install a Bing extension and switch the default search provider to Bing, ultimately directing users to Microsoft Rewards.
First discovered by tester Xeno Panther and reported by Windows Latest, the application presents a seemingly innocuous setup wizard. Upon execution, it defaults to recommending Bing as the search engine, with small text indicating the change would apply to Microsoft Edge, Mozilla Firefox, and Google Chrome. Users who proceed by clicking "Accept and continue" are then presented with a completion screen and a link to rewards.bing.com/m365offer.
Security professionals have noted the application's packaging, which utilizes a WinUI shell with WebView2 and a system-like filename, potentially misleading users into trusting it. The "Microsoft Bing Homepage & Search" extension itself is not new and is already available on the Chrome Web Store with millions of users. However, the integration of a native Windows installer that targets multiple browsers and pushes a rewards program is a novel approach.
During testing, both Chrome and Brave interrupted the installation process, warning users that the extension requested broad permissions. These permissions include the ability to read and change website data, display notifications, and modify homepage and search settings, which are similar to those exploited in malicious search-hijacking campaigns. While Microsoft's extension is a first-party product, the extensive permissions granted are a significant browser control decision.
Adding to the user experience friction, once Bing is set as the default, Chrome may present a prompt asking if the user wants to revert to Google Search. Microsoft's application counters this by displaying a "Wait, don't change it back!" message, warning that reverting would disable the extension. This behavior mirrors a similar prompt war documented in March 2024.
While the process is not entirely silent and requires user interaction, the combination of a pre-selected "Yes" toggle, an official-looking filename, and the lure of rewards is designed to encourage users to bypass security considerations. Home users are advised to decline the installation unless they specifically wish to use Bing and the MSN feed.
For administrators, this application highlights the need for robust endpoint security policies. It is recommended to block unapproved search add-ons through browser policies in Chrome, Firefox, and Brave to prevent unauthorized changes to user search preferences and potential security risks associated with hijacked search results.