Plantastic Tab Rogue Browser Extension

During a routine investigation of deceptive websites, our research team came across the Plantastic Tab browser extension. Our analysis revealed that this extension operates by modifying browser settings to promote the plantastictab.com fake search engine through redirects. As a result of this behavior, Plantastic Tab falls into the category of browser hijackers.

Upon installing Plantastic Tab on our test machine, we observed that it changed the default search engine, homepage, and new tab/window URL to the plantastictab.com website. Consequently, whenever we opened a new tab or window, or even entered a search query into the address bar, we were redirected to plantastictab.com.

Typically, fake search engines lack the capability to generate search results, so they redirect users to genuine Internet search websites. In our analysis, we found that Plantastic Tab followed this pattern and redirected us to the Bing search engine (bing.com). However, it is important to note that the destination of the redirections may vary based on factors such as user geolocation.

Furthermore, browser-hijacking software often limits access to removal-related settings and may undo any changes made by the user, making its removal more challenging and ensuring its persistence.

It is likely that Plantastic Tab possesses data-tracking capabilities, as this is common among browser hijackers. The collected data may include visited URLs, viewed webpages, searched queries, Internet cookies, login credentials, personally identifiable information, financial data, and more. This data can be sold to third parties or exploited for profit in various ways.

Why Are Fake Search Engines a Potential Threat to Your Privacy and Online Security?

Fake search engines pose a potential threat to your privacy and online security due to the following reasons:

• Data Collection and Tracking: Fake search engines often employ data-tracking mechanisms to collect extensive information about your online activities. This includes the URLs you visit, webpages you view, search queries you make, login credentials, personally identifiable details, financial information, and more. The collected data can be used for various purposes, including targeted advertising, profiling, identity theft, or sold to third parties without your consent.
• Exposure to Malicious Websites: Fake search engines may redirect your search queries to malicious websites or phishing pages. These websites can deceive you into downloading malware, entering sensitive information, or falling victim to scams. These threats can compromise your device's security, lead to financial losses, or expose you to identity theft.
• Unauthorized Modifications and Control: Browser hijackers, including fake search engines, can modify your browser settings without your permission. They may change your default search engine, homepage, new tab/window URL, or install additional unwanted extensions or plugins. These modifications can lead to a degraded browsing experience, unwanted advertisements, and reduced control over your online activities.
• Decreased Search Accuracy and Quality: Fake search engines often lack the capability to provide reliable and relevant search results. Their primary objective is to generate revenue through redirects and advertisements, rather than delivering accurate and useful search outcomes. This can negatively impact your ability to find legitimate information and hinder your online research.
• Difficulty in Removal: Fake search engines, along with their associated browser extensions or plugins, can be challenging to remove. They may employ tactics to resist removal, such as disabling or restricting access to browser settings or undoing changes made by the user. This persistence makes it difficult for users to regain control over their browsers and restore their preferred settings.

To protect your privacy and online security, it is crucial to be cautious while installing browser extensions or plugins, regularly review your browser settings, and promptly remove any suspicious or unwanted software. It is recommended to use reputable search engines and security software, keep your devices and applications up to date, and practice safe browsing habits to mitigate the risks associated with fake search engines and browser hijackers.