Beware of the GPT Search Navigator Rogue Extension
During our research into deceptive websites, our team found the GPT Search Navigator browser extension, which claims to enhance users' Google searches. However, upon closer examination, we discovered that GPT Search Navigator is actually a browser hijacker that promotes a fake search engine called ask.gptsearchnavigator.com. Browser hijackers typically set fake search engines as the default search engines, as well as the homepages and new tabs/windows of users' browsers.
Once installed on our test machine, GPT Search Navigator caused new browser tabs/windows to redirect to ask.gptsearchnavigator.com, regardless of where the user was trying to navigate. This browser hijacker also employed techniques to maintain persistence and prevent browser recovery.
Fake search engines like ask.gptsearchnavigator.com typically cannot provide users with search results, so they redirect them to legitimate search engines. During our investigation, ask.gptsearchnavigator.com redirected users to the Google search engine. However, this could vary based on factors like the user's location.
In addition to promoting a fake search engine, GPT Search Navigator also monitors users' browsing activity, including visited URLs, viewed webpages, search queries, bookmarks, and personal information like usernames, passwords, and credit card numbers. This data can be sold to third parties or used for profit.
What Are Browser Hijackers and How Can They End Up on Your System?
Browser hijackers are types of malware that take control of users' web browsers, typically by changing their default search engine, homepage, and new tab settings. Once installed, a browser hijacker can redirect users to malicious or unwanted websites, display unwanted pop-up ads, and collect users' personal information.
Browser hijackers can end up on users' systems in several ways, including:
- Bundled software: Some free software downloads may include browser hijackers as part of their installation packages. When users download and install the software, the hijacker is also installed without their knowledge.
- Phishing scams: Scammers may send emails with links that, when clicked, install browser hijackers on users' systems.
- Malicious websites: Visiting certain websites or clicking on malicious ads can also result in browser hijacker infections.
To protect your system from browser hijackers, it is essential to:
- Be cautious when downloading and installing software, especially from untrusted sources.
- Keep your browser and other software up to date to reduce the risk of vulnerabilities being exploited.
- Use antivirus and anti-malware software to detect and remove browser hijackers and other types of malware.
- Avoid clicking on links or downloading attachments from unfamiliar or suspicious emails or websites.
