Sqoo Search Engine Rogue Browser Extension

The browser hijacker known as Sqoo search engine is an extension that alters browser settings to generate redirects through the fake search engines sharesceral.uno and sqoo.co. Moreover, this extension invasively monitors users' browsing activities.

In our test environment, the Sqoo extension set sharesceral.uno as the default search engine, homepage, and URL for new tabs/windows. Consequently, whenever we opened a new tab/window or entered a search query in the URL bar, we were redirected to the sharesceral.uno website.

In the mentioned scenario, sharesceral.uno immediately redirected to sqoo.co, where the query was automatically entered into the search input field on the page. Clicking the search icon on sqoo.co further redirected us to the legitimate Yahoo search engine (search.yahoo.com). It's important to note that the specific redirect chains may vary based on factors like user location.

Fake search engines redirect users to genuine search websites since they lack the capability to generate authentic search results. In rare cases where these fake sites do provide search results, they are often inaccurate and may include sponsored, deceptive, or malicious content.

Browser-hijacking software typically employs techniques to ensure persistence, making its removal challenging and preventing users from restoring their browsers to their original state.

The Sqoo search engine extension also includes data-tracking features. It collects various information of interest, such as visited URLs, viewed webpages, search queries, internet cookies, personally identifiable details, login credentials, financial data, and more. This gathered information can potentially be shared with or sold to third parties.

How Can Fake Search Engines Compromise Your Online Privacy?

Fake search engines can compromise your online privacy in several ways:

• Data Tracking: Fake search engines often employ tracking mechanisms to gather information about your browsing habits, search queries, clicked links, and visited websites. They may use cookies or other tracking technologies to collect this data. This information can be used for targeted advertising, profiling, or even sold to third parties without your consent.
• Personally Identifiable Information (PII) Exposure: Fake search engines may prompt you to enter personal information, such as your name, email address, or phone number, under the guise of providing certain services or features. However, this data can be misused or sold, leading to unwanted spam emails, phishing attempts, or identity theft.
• Manipulated Search Results: Fake search engines often provide manipulated or deceptive search results. They may prioritize sponsored content, ads, or malicious links, leading you to click on unsafe websites or unknowingly download malware. This puts your device and personal data at risk.
• Browser Hijacking: Some fake search engines, like browser hijackers, modify your browser settings without your consent. They can change your default search engine, homepage, or new tab settings to redirect your searches to their own search engine or display unwanted ads. This intrusive behavior not only compromises your privacy but also disrupts your browsing experience.
• Malware Distribution: Fake search engines can serve as a gateway for malware distribution. By clicking on manipulated search results or downloading software promoted by the fake search engine, you may inadvertently install malware or potentially unwanted programs (PUPs) on your device. This malware can further compromise your privacy and security.

To protect your online privacy from fake search engines, it is crucial to use reputable and trusted search engines, keep your browser and security software up to date, be cautious when providing personal information online, and avoid clicking on suspicious or deceptive links. Regularly reviewing and managing your browser extensions can also help prevent unwanted search engine modifications or malicious activities.