Browser Hijacker threatens more than your privacy

Rubica
Rubica
Published in
2 min readJun 25, 2018

Rubica’s cyber analysts discovered targeted adware which tricked users into clicking and downloading a browser hijacker titled “e-Safety Plus” or “Internet Safety Plus”.

If installed, this browser hijacker loads into your web browser via an extension and has the capability to:

  1. Read and change all your data on websites you visit. Hackers would then be able to understand your traffic behavior.
  2. Display notifications and pop up ads containing links to malicious sites.
  3. Change your search engine to one that collects your browsing data.
  4. Change your web browser’s default homepage.
  5. Modify the “new tab” functionally to launch a modified search portal page. Meaning, each time you launch a new search tab, your data can be intercepted or redirected to malicious sites.

It’s easy to mistake this browser hijacker as a legitimate browser. Notice how they use many prompts to encourage you to add the extension and it includes a rating of 5 stars.

Image from Rubica.

Browser add-ons produced by the same suspicious developer also present similar threats. These include MoviesNet Search, MusicNet Start, NetGaming Search, FilmsNet Start, and MusicNet Search. We highly recommend removing these programs from your devices. When surfing the internet, be cautious about visiting sites that produce multiple pop-ups. Before installing a program, verify the developer and name of the program.

Rubica is able to block its customers from downloading this unwanted browser hijacker, thereby protecting their personal information. In addition, Rubica can detect suspicious traffic from unwanted programs installed on devices and our Cyber Support team can help remove malicious programs.

--

--

Rubica
Rubica
Editor for

True #CyberSecurity that finds threats — before they find you. https://rubica.com/