MySites Rogue Browser Extension

During the examination of suspicious web pages, our research team encountered the MySites browser extension. This software claims to offer rapid access to users' frequently visited websites. Our assessment unveiled that this extension modifies browser configurations to trigger redirections to the fraudulent goog.mysitesext.com search engine. Consequently, MySites is classified as a browser hijacker.

MySites adjusts specific browser settings, including the homepage, the URL for new browser tabs/windows, and the default search engine. When a browser hijacker is active, searches initiated through the URL bar and newly opened browser tabs/windows lead to redirects towards the endorsed website. In the instance of MySites, these redirects point to goog.mysitesext.com.

Nevertheless, illegitimate search engines lack the ability to generate search results, often redirecting users to legitimate internet search platforms. During our investigation, goog.mysitesext.com directed users to the Bing search engine (bing.com). It's noteworthy that this destination could vary due to factors like user location influencing redirections.

Furthermore, browser hijacking software might obstruct access to settings related to removal or revert changes made by users, thus impeding attempts to restore the browser's original state.

In addition, MySites engages in monitoring users' online activities. The data under surveillance might encompass visited URLs, accessed web pages, search queries, internet cookies, login credentials, financial data, and more. This gathered information can then be turned into profit through its sale to third parties.

What Are Rogue Browser Extensions?

Rogue browser extensions, also known as malicious browser extensions, are software add-ons or plugins designed to run within web browsers such as Google Chrome, Mozilla Firefox, Microsoft Edge, and others. Unlike legitimate browser extensions that offer useful features and enhance browsing experiences, rogue extensions have malicious intent and can cause harm to users and their systems.

Here are some characteristics of rogue browser extensions:

• Malicious Intent: Rogue extensions are created with the intention of exploiting users for various purposes, such as stealing personal information, displaying unwanted ads, redirecting users to malicious websites, or spreading malware.
• Unauthorized Activities: Rogue extensions often perform actions without the user's consent or knowledge, such as altering browser settings, tracking browsing behavior, injecting ads into web pages, or even controlling the browser remotely.
• Deceptive Installation: These extensions can be installed through deceptive methods, such as bundling with legitimate software or disguising themselves as useful tools, making it difficult for users to identify their true nature.
• Privacy Violations: Many rogue extensions collect sensitive user data without consent, including browsing history, login credentials, financial information, and more. This data can be exploited for various malicious purposes.
• Browser Hijacking: Rogue extensions may modify browser settings, such as the homepage, default search engine, and new tab page, redirecting users to websites they didn't intend to visit. This is often done to generate revenue through ad clicks or to drive traffic to specific sites.