Glacier Tab Rogue Browser Extension

Glacier Tab is a browser extension that promises to offer high-definition wallpapers, presumably with a glacier theme. However, upon examination, we have identified it as a browser hijacker. Glacier Tab modifies browser settings to promote the website glaciertab.com through redirections.

On our test system, Glacier Tab set glaciertab.com as the browser's homepage, default search engine, and the URL for new tabs and windows. As a result, whenever we opened a new tab or entered a search query in the URL bar, we were redirected to the glaciertab.com website.

Typically, illegitimate search engines cannot provide actual search results, so they redirect users to legitimate search engines. During our research, glaciertab.com redirected to the Google search engine (google.com). However, it's important to note that the destination may vary based on factors like the user's location.

Browser-hijacking software often employs techniques to persistently maintain its control over the browser, making it difficult for users to regain control. Additionally, Glacier Tab may have the capability to track user data.

This data tracking may encompass details like visited websites, viewed pages, search queries, cookies, login credentials, personal information, financial data, and more. The collected information can potentially be shared with or sold to third parties, which could include cybercriminals.

What Are Fake Search Engines?

Fake search engines, sometimes referred to as malicious or deceptive search engines, are websites or search engine interfaces that mimic legitimate search engines but operate with malicious intent. These fake search engines are designed to deceive users and typically engage in one or more of the following harmful activities:

• Misleading Search Results: Fake search engines may display search results that appear genuine but are often manipulated to include sponsored links, ads, or malicious links that can lead to unsafe or deceptive websites.
• Browser Hijacking: Some fake search engines alter a user's browser settings, such as the homepage, default search engine, and new tab URL, redirecting users to the fake search engine each time they open a new tab or perform a search.
• Data Collection: These search engines often gather user data, including search queries, browsing history, IP addresses, and geolocation information, without the user's consent. This collected data can be used for various purposes, including targeted advertising or even identity theft.
• Phishing: Some fake search engines may serve as a front for phishing attacks by directing users to counterfeit login pages or deceptive websites designed to steal personal information, such as usernames and passwords.
• Ad Injection: Fake search engines may inject additional ads into search results and web pages, leading to a poor user experience and generating revenue for the operators.
• Malware Distribution: In some cases, these deceptive search engines may serve as a distribution point for malware. Users who interact with search results or download suggested files may inadvertently download malicious software.