Shift Browser is signed adware that fingerprints your endpoint before it drops payload

Heimdal’s SOC flagged a surge in detections tied to a program called Shift Browser on 2 September 2026. Our team confirmed activity on more than 50 client environments in a single day. The installers we captured trace to a malvertising lure. Shift Browser also runs a documented paid creator and affiliate marketing operation, though we […] The post...