Cinema Pro Browser Extension Swaps Your Search Engine

After conducting a thorough analysis, our research team uncovered that the Cinema Pro browser extension, which is marketed as a tool for easy access to film-related content, is actually a browser hijacker.

It promotes a fake search engine called find.ssrcnav.com by changing the default search engine, homepage, and new tab/window URLs of the browser. Consequently, any new tabs/windows opened or web searches conducted through the URL bar are redirected to this search engine. The extension also uses tactics to ensure its persistence, making it difficult for users to recover their browsers. Typically, illegitimate search engines redirect users to genuine search websites as they are unable to provide search results themselves. We found that in the case of Cinema Pro, find.ssrcnav.com redirected to Bing (bing.com), although this could vary depending on user location.

Moreover, the extension may potentially monitor users' browsing activity, including URLs visited, webpages viewed, search queries, IP addresses, cookies, personal information, financial data, etc., and sell or misuse this data for profit.

How Can Rogue Browser Extensions Change Your Browser's Search Engine and Why is This a Bad Thing?

Rogue browser extensions can change your browser's search engine by altering its default settings. They do this by modifying the browser's configuration, such as the homepage, new tab page, or search engine settings, without your knowledge or consent. This means that when you perform a search using your browser, you may be directed to a different search engine, which may not be as trustworthy or reliable as the one you intended to use.

Changing your browser's search engine in this way can be a bad thing for several reasons. Firstly, the search engine may be a fake or fraudulent one, designed to trick users into clicking on ads or links that could harm their computer or steal their personal information. These search engines often display irrelevant or low-quality search results, making it difficult for users to find the information they need.

Secondly, rogue browser extensions may also track your online activity, including your search queries, visited websites, and personal information, without your knowledge or consent. This information can be sold to third-party advertisers or used for malicious purposes, such as identity theft or financial fraud.

Lastly, these extensions can be difficult to remove and may cause other issues with your browser, such as slow performance or crashes. Some rogue extensions may also reinstall themselves even after you have removed them, making it even harder to get rid of them.

To avoid the risks associated with rogue browser extensions, it is recommended to only install extensions from trusted sources and to regularly review your installed extensions and remove any that are unnecessary or suspicious.