Drop Tab Rogue Browser Extension
During our investigation of suspicious websites, our research team stumbled upon the Drop Tab browser extension, which is advertised as a tool for displaying browser wallpapers. However, our thorough examination revealed that this seemingly innocuous software actually engages in deceptive practices. It manipulates browser settings to promote the search.droptab.net fake search engine through redirects. Moreover, this extension invades users' privacy by monitoring their browsing activities. As a result, Drop Tab falls into the category of browser hijackers.
Similar to other browser-hijacking software, Drop Tab alters critical browser settings, including the homepage, default search engine, and new tab/window configurations. Consequently, with Drop Tab installed, any attempt to open new browser tabs or enter search queries in the URL bar results in automatic redirects to the search.droptab.net website.
The fake search engine, search.droptab.net, typically lacks the ability to produce genuine search results, leading users to authentic Internet search engines like Bing (bing.com) during our research. However, the final destination of the redirects might vary depending on factors such as the user's geographical location.
Browser hijackers often employ tactics to persistently resist removal efforts. They may deny access to removal-related settings or automatically reset any changes made by the user.
Furthermore, Drop Tab possesses data-tracking capabilities, enabling it to gather targeted information, such as visited URLs, viewed pages, search queries, internet cookies, personally identifiable details, usernames/passwords, and financial data. The collected information could be exploited through third-party sales, turning it into a profitable asset for malicious actors.
How Can Browser Hijackers End Up on Your System?
Browser hijackers can end up on your system through various methods, most of which involve tricking users into unknowingly installing the malicious software. Here are some common ways browser hijackers can infect your system:
Software Bundling: Browser hijackers often come bundled with legitimate software or free applications that users download from the internet. When you install the desired program, the browser hijacker may be included as an additional "bonus" without your knowledge or consent.
Deceptive Pop-up Ads: Some websites display deceptive pop-up ads that claim to offer useful tools or updates. Clicking on these ads can lead to the unintentional download and installation of browser hijackers.
Fake Software Updates: Cybercriminals may create fake update notifications that appear to be from trusted software providers. When users click on these fake updates, they unknowingly install the browser hijacker.
Infected Email Attachments: Browser hijackers can be distributed through malicious email attachments. If you open an infected attachment, the malware can install on your system.
Pirated Software and Cracks: Illegitimate sources of software, such as cracked versions or pirated software, may contain browser hijackers and other types of malware.
Malicious Websites: Visiting compromised or malicious websites can trigger drive-by downloads, automatically installing the browser hijacker without any action required from the user.
Fake Browser Extensions: Some browser extensions in official app stores may appear legitimate but are actually browser hijackers in disguise. Users may unknowingly install these extensions, granting the hijackers access to their browsers.
Social Engineering: Browser hijackers can use social engineering techniques, such as enticing users with offers or rewards, to convince them to download and install the malware willingly.
