Beware of My World Clock Rogue Browser Extension

During our investigation of suspicious websites, our research team stumbled upon the My World Clock browser extension. According to its promotional webpage, the extension claims to offer convenient access to local weather forecasts. However, true to its name, it primarily functions as a tool to display the current time in various timezones.

Upon closer examination, we determined that My World Clock is, in fact, a browser hijacker that promotes the use of the myworldclock.xyz fake search engine. Browser hijackers are known to forcibly alter default search engines, homepages, and new browser tab/window URLs, redirecting users to endorsed sites.

My World Clock follows suit and applies similar modifications to browsers. Consequently, when this extension is installed, opening new browser tabs/windows or conducting search queries in the URL bar will lead to redirects to the myworldclock.xyz website.

It is important to note that browser hijackers commonly employ techniques to persistently maintain control over the user's browser, complicating their removal. These software may restrict access to removal-related settings and undo user-made changes.

Fake search engines typically lack the capability to provide genuine search results, so they redirect users to legitimate ones. At the time of our research, myworldclock.xyz redirected users to the Bing search engine (bing.com). However, the redirection destination may vary based on factors such as the user's geographical location and other determinants.

In addition to its browser hijacking capabilities, My World Clock possesses data-tracking functionalities. This means it can collect various types of user information, including visited URLs, viewed webpages, searched queries, Internet cookies, account login credentials, personally identifiable details, financial data, and more. The collected information can be sold to third parties or exploited for profit by the malicious actors behind the extension.

What Are Browser Hijackers?

Browser hijackers are a type of malicious software that covertly alters the settings of a web browser without the user's consent or knowledge. These unwanted programs take control of the browser and manipulate its configuration to redirect users to specific websites, typically for malicious purposes. Browser hijackers can affect various web browsers, including Google Chrome, Mozilla Firefox, Microsoft Edge, Safari, and others.

The main objectives of browser hijackers include:

• Changing Default Settings: Browser hijackers modify the browser's default homepage, search engine, and new tab page settings. This causes the browser to open specific websites automatically, often leading to fake search engines or other malicious sites.
• Redirecting Web Traffic: When users try to access certain websites, a browser hijacker may redirect them to unrelated or potentially harmful sites. This can lead to exposure to phishing sites, scam pages, or websites containing malware.
• Promoting Fake Search Engines: Browser hijackers often promote fake search engines that mimic popular search engines. When users perform searches through these fake engines, they may receive manipulated search results or face additional redirections.
• Displaying Intrusive Ads: Browser hijackers can inject unwanted and intrusive advertisements into web pages, making browsing experience unpleasant and disrupting normal web functionality.
• Collecting User Data: Some browser hijackers track users' browsing habits and collect sensitive information, such as browsing history, search queries, login credentials, and other personal data. This data may be used for targeted advertising or sold to third-party advertisers.