Netskope Threat Labs

Choziosi

ATP Sandbox Adv. Heuristics

Choziosi is a browser hijacker for Chrome, first seen in January 2022, that infects users through pirated media downloads such as games, software, wallpapers, and movies. Its main component is a JavaScript browser extension that serves advertisements and hijacks search requests to major search engines, and initial infectors exist for both Mac and Windows.

First seen
May 2022
Last seen
October 2026
Alert Name
ByteCode-MSIL.Trojan.Choziosi
Script-JS.Trojan.Choziosi
Win32.Downloader.Choziosi
Win32.Trojan.Choziosi