'Sport background pictures new tab' Rogue Browser Extension

During our investigation of untrustworthy websites, our team came across an extension called "Sport background pictures new tab." This extension offers randomized sports-themed wallpapers for web browsers.

Upon analyzing this software, we identified it as a browser hijacker. The "Sport background pictures new tab" extension modifies browser settings to promote the feed.topappsparadise.com search engine through redirects.

On our test machine, we observed that "Sport background pictures new tab" set feed.topappsparadise.com as the browser's homepage, default search engine, and new tab/window URL. Consequently, whenever we opened a new tab/window or performed a search using the URL bar, we were redirected to the feed.topappsparadise.com website.

It is important to note that browser-hijacking software often employs persistence techniques to make removal challenging and prevent users from restoring their browsers to their original settings.

Fake search engines like feed.topappsparadise.com typically cannot provide reliable search results, so they often redirect users to legitimate search engines. During our research, we noticed that feed.topappsparadise.com generated two different redirects: nearbyme.io and the genuine Yahoo search engine (search.yahoo.com).

Nearbyme.io is a deceptive internet search site that may display inaccurate search results and potentially include deceptive or harmful content.

Keep in mind that the redirection behavior of feed.topappsparadise.com may vary depending on factors such as the user's geolocation.

Furthermore, "Sport background pictures new tab" possesses data-tracking capabilities. It can collect various targeted data, including visited URLs, viewed webpages, search queries, internet cookies, usernames, passwords, personally identifiable information, financial details, and more. The collected data can be monetized by selling it to third parties.

What Are Browser Hijackers and Rogue Browser Extensions?

Browser hijackers and rogue browser extensions are malicious software or add-ons that modify the settings of web browsers without the user's consent or knowledge. These unwanted programs can cause disruptions to the user's browsing experience and pose risks to their online privacy and security. Here's an overview of browser hijackers and rogue browser extensions:

Browser hijackers are malicious programs that hijack the user's browser settings, such as the default homepage, search engine, and new tab page. They often redirect users to unwanted websites or display intrusive advertisements. Browser hijackers typically enter systems through deceptive software bundling, misleading advertisements, or compromised websites. They can be challenging to remove and may exhibit persistence techniques to maintain control over the browser settings.

Rogue browser extensions are unauthorized or malicious extensions/add-ons that are installed in web browsers without the user's consent. These extensions may claim to offer useful functionalities or enhancements but, in reality, their purpose is to collect user data, display intrusive advertisements, or redirect users to malicious websites. Rogue extensions often exploit vulnerabilities or use deceptive techniques to infiltrate browsers. They can be found in official extension stores as well as third-party websites.

Common Characteristics of Browser Hijackers and Rogue Browser Extensions

• Unwanted Modifications: They modify browser settings, such as the homepage, default search engine, or new tab page, without user consent.
• Redirects: They forcefully redirect users to specific websites, often leading to irrelevant or potentially harmful destinations.
• Intrusive Advertisements: They display excessive and intrusive advertisements, including pop-ups, banners, and in-text ads.
• Data Collection: They may track and collect user data, including browsing habits, search queries, and personal information, for marketing or malicious purposes.
• System Slowdown: They can consume system resources, leading to slower browser performance and overall system slowdown.
• Privacy and Security Risks: They pose risks to user privacy and online security by exposing personal information or directing users to phishing or malware-infected websites.