Superstar3.io Pushes Fake Search Engine
After downloading a suspicious installer from an untrustworthy website, our team came across superstar3.io, a misleading search engine that provides search results sourced from various other search engines. It's essential to highlight that the installer used to promote superstar3.io may include additional malicious components.
Our investigation revealed that superstar3.io is launched by a process named "SuperStar.SearchOptimizer" in the Task Manager. Additionally, there's a second process associated with superstar3.io called "SuperStar.OptimizerService." This secondary process ensures the continuous operation of "SearchOptimizer" in case it is terminated, which is quite unusual for browser hijackers. Most browser hijackers typically take the form of browser extensions rather than a separate executable that interacts with the web browser.
Furthermore, our findings indicated that superstar3.io displays search results originating from various sources, including searchmenow.gg (an untrustworthy search engine), Yahoo (a reputable search engine), and potentially other search engines, which may be reliable or dubious. Another website that superstar3.io redirects users to is bangsearch[.]pro.
The use of fake search engines like superstar3.io and questionable search engines like searchmenow.gg can expose users to multiple risks. These engines might manipulate search results to promote malicious websites or display deceptive advertisements, potentially leading users to download malware or divulge sensitive information.
Moreover, these engines may compromise user privacy by tracking and collecting search data for unauthorized purposes. Interacting with such search engines increases the likelihood of encountering fraudulent schemes, deceptive content, and other cyber threats.
Considering that superstar3.io is promoted through a malicious installer, there is a significant possibility that it could be bundled with various unwanted software, including adware, browser hijackers, or even malicious applications.
How Are Malicious Installers Commonly Distributed Online?
Malicious installers are distributed online through a variety of deceptive methods and channels. These tactics are employed by cybercriminals to trick users into downloading and installing harmful software onto their devices. Here are some common ways malicious installers are distributed:
Phishing Emails:
Cybercriminals send emails that appear legitimate and often contain enticing subject lines or urgent messages. These emails may include malicious attachments or links to malicious websites hosting the installer.
Malvertising:
Malicious advertisements, or malvertisements, can be displayed on legitimate websites. Clicking on these ads can lead to the download of malicious installers. Ad networks are sometimes compromised to serve these malicious ads.
Bundled Software:
Freeware or shareware downloads often come bundled with additional software, including malicious installers. Users may inadvertently install malware while installing legitimate programs if they don't carefully read the installation prompts and decline bundled offers.
Torrents and File-Sharing Sites:
Cybercriminals upload fake or infected versions of popular software, games, movies, or other content to torrent and file-sharing websites. Users who download and install these files may unknowingly introduce malware onto their devices.
Fake Updates:
Users are presented with fake software update notifications, often mimicking legitimate update prompts from operating systems or software. Clicking on these prompts can lead to the download and installation of malicious software.
Social Engineering on Websites:
Some websites use social engineering techniques to deceive users into clicking on download buttons that actually trigger the download of malicious installers. These buttons are often designed to resemble legitimate download buttons.
Pirated Software and Cracks:
Websites that offer pirated software or software cracks are known for distributing malicious installers. Users looking for free versions of paid software may inadvertently download malware.
