Naturey New Tab Extension

Promoted as an extension that showcases nature-themed browser wallpapers, Naturey New Tab came to our attention during an examination of unreliable websites.

Upon thorough inspection, our research team determined that Naturey New Tab functions as a browser hijacker. This extension alters browser settings to endorse the fake search engine natureynewtab.com. Typically, browser hijackers modify default search engines, homepages, and new tab/window URLs to promote specific websites. Consequently, searches conducted through the URL bar and new browser tabs/windows redirect users to the promoted site.

In the case of Naturey New Tab, these redirects lead to natureynewtab.com. Fake search engines commonly lack the ability to generate search results, redirecting instead to legitimate Internet search platforms. Natureynewtab.com follows this pattern, directing users to the Bing search engine. It's important to note that the webpage's redirection destination may vary.

Browser hijackers often employ tactics to ensure persistence, such as blocking access to removal-related settings or reversing user-made changes, impeding browser recovery.

Additionally, software falling into this category typically engages in monitoring users' online activities, and Naturey New Tab may be no exception. The collected information may include visited URLs, viewed pages, search queries, internet cookies, usernames/passwords, personally identifiable details, and credit card numbers. This data can then be monetized by selling it to third parties.

What Are Rogue Browser Extensions?

Rogue browser extensions, also known as malicious or unauthorized browser extensions, are add-ons or plugins for web browsers that behave in a deceptive or harmful manner. These extensions may exploit the trust users place in browser extensions to carry out various malicious activities. Here are some characteristics and potential risks associated with rogue browser extensions:

• Deceptive Purposes: Rogue extensions often masquerade as legitimate tools, promising useful features or enhancements to the user's browsing experience. They may claim to provide functionalities like ad-blocking, security enhancements, or custom themes to lure users into installing them.
• Unauthorized Access: Once installed, rogue extensions may gain unauthorized access to sensitive information or browser features. This could include accessing browsing history, collecting login credentials, or modifying browser settings without the user's knowledge or consent.
• Browser Hijacking: Some rogue extensions are designed to hijack the user's browser by changing default search engines, homepages, or new tab pages. This can lead to undesired redirects, displaying fake search results, or promoting specific websites.
• Adware and Click Fraud: Rogue extensions may inject unwanted advertisements into the user's browsing experience. In some cases, they engage in click fraud, generating false clicks on ads to generate revenue for the malicious actors.
• Spyware and Data Collection: Malicious browser extensions might act as spyware, collecting sensitive information about the user's online activities. This can include monitoring visited websites, search queries, and even personal information.