Star Field Rogue Browser Extension

During the examination of deceptive websites, our researchers stumbled upon a rogue browser extension known as Star Field. This extension initially presents itself as a means to display attractive star-themed browser wallpapers.

However, upon closer investigation, we identified Star Field as a browser hijacker. Its primary function is to manipulate browser settings, leading to redirects towards the fraudulent search engine, search.star-field.net.

The browser-hijacking software forcefully alters browsers' default settings, including homepages, default search engines, and new browser tab/window URLs. In the case of Star Field, these modifications are made to direct users to the search.star-field.net site. Consequently, whenever new browser tabs/windows are opened or search queries are entered into the URL bar, users are redirected to the said site. To make matters worse, browser hijackers often employ techniques to maintain their control over the browser, making it difficult for users to undo these changes.

It's worth noting that illegitimate search engines like search.star-field.net usually lack the ability to provide genuine search results. Therefore, they often redirect users to legitimate Internet search engines. During our research, we observed that search.star-field.net redirected users to the Bing search engine (bing.com). However, this redirection may vary depending on factors like the user's geographical location.

Apart from its browser hijacking capabilities, Star Field is also equipped with data-tracking functionalities. This means that the extension can gather various types of user information, including visited URLs, viewed pages, search queries, bookmarks, Internet cookies, usernames/passwords, personally identifiable details, credit card numbers, and more. The collected data can then be shared with or sold to third-party entities, raising concerns about user privacy and security.

What Are Fake Search Engines and Why Should You Avoid Them?

Fake search engines are websites or web pages that imitate legitimate search engines but provide deceptive or unreliable search results. These websites are designed to trick users into using them for their searches, often to serve malicious purposes or generate revenue for the attackers. There are several reasons why you should avoid using fake search engines:

• Misleading Search Results: Fake search engines often present misleading or irrelevant search results. They may prioritize sponsored links or advertisements, leading you to click on potentially unsafe or malicious websites.
• Security Risks: Using fake search engines can expose you to security risks, such as malware infections or phishing attacks. These websites might redirect you to dangerous sites that could compromise your computer or steal sensitive information.
• Privacy Concerns: Fake search engines may track your search queries, browsing habits, and other personal information. They may sell this data to third parties or use it for targeted advertising without your consent.
• Browser Hijacking: Some fake search engines are designed as browser hijackers. They forcefully change your browser's settings, making them the default search engine or homepage. This can be challenging to reverse and can disrupt your browsing experience.
• Ineffective Search Results: Fake search engines often lack the capabilities of legitimate search engines, resulting in poor search results. They may not index all websites or provide up-to-date information.