Dragon Baby Browser Hijacker
During our routine examination of deceptive websites, our researchers stumbled upon the Dragon Baby browser extension. Upon thorough analysis, we determined that this software functions as a browser hijacker.
Dragon Baby alters browser settings to promote the fraudulent dragonboss.solutions search engine. Additionally, this extension engages in the surveillance of users' online browsing activities. Browser-hijacking software typically modifies browser configurations by reassigning the homepage, default search engine, and the URL for new tabs/windows to the address of the endorsed website.
With Dragon Baby installed, any attempts to open new browser tabs/windows or perform search queries using the URL bar will result in automatic redirects to the dragonboss.solutions website.
It's worth noting that browser hijackers often employ techniques to maintain persistence, making it challenging for users to restore their browser settings.
Fake search engines like dragonboss.solutions generally lack the ability to generate legitimate search results, so they often redirect users to established internet search platforms. At the time of our research, dragonboss.solutions redirected users via searchokay.com to the Bing search engine (bing.com). However, it's important to keep in mind that redirection destinations may vary, influenced by factors such as user geolocation.
Furthermore, Dragon Baby specifically targets browsing histories. However, it may also collect a broader range of data, including search queries, IP addresses, internet cookies, usernames and passwords, personally identifiable information, financial data, and more. This harvested data can potentially be shared with or sold to third parties.
What Are Fake Search Engines?
Fake search engines, also known as deceptive search engines or rogue search engines, are websites or web applications that masquerade as legitimate search engines but operate with malicious intent. These fake search engines are designed to deceive users into thinking they are conducting genuine web searches when, in reality, they serve various harmful purposes. Here are some key characteristics and purposes of fake search engines:
- Deceptive Appearance: Fake search engines often mimic the look and feel of popular and trusted search engines like Google, Bing, or Yahoo. This similarity in appearance can mislead users into believing they are using a reputable search service.
- Unreliable or Manipulated Search Results: Instead of providing accurate and relevant search results, fake search engines may return altered or manipulated results. These results can include sponsored links to potentially harmful websites, phishing sites, or low-quality content.
- Browser Hijacking: Some fake search engines are associated with browser hijackers. These hijackers modify a user's browser settings, such as the homepage, default search engine, and new tab URL, to force the use of the deceptive search engine. Users may find it difficult to revert to their preferred search engine or homepage.
- Adware and Click Fraud: Many fake search engines are used as vehicles for adware and click fraud. They inundate users with excessive and often misleading advertisements, generating revenue for the operators through ad clicks.
- Data Collection: Fake search engines may gather user data, including search queries, browsing history, IP addresses, and even personal information. This data can be exploited for various malicious purposes, including identity theft and targeted advertising.
