Shift Browser Malware: Surge in Detections Linked to Malvertising

• •Shift Browser is flagged as a potentially unwanted program by multiple security vendors.
• •Malvertising is the primary distribution method, leading to unwanted installations.
• •User reports indicate issues with auto-starting and browser hijacking.

On October 13, 2026, reports emerged about a program called Shift Browser, flagged as a potentially unwanted program (PUP) by Malwarebytes since October 2024. The Heimdal Security MXDR team detected a surge in Shift Browser detections on September 2, 2026, affecting over 50 client environments in a single day. The program is distributed via malvertising, often misleading users into installation. Users report that Shift Browser auto-starts with Windows, hijacks default browser settings, and resists standard uninstallation methods. While Shift Technologies claims it is not malware, the program's behavior and distribution methods raise significant concerns. The current status indicates ongoing user reports of unwanted behavior, but no confirmed malicious payloads have been identified. The situation remains under observation as security vendors continue to analyze the program's impact.