TimeNow Browser Extension
During our investigation of deceptive websites, our researchers came across the TimeNow browser extension. This software is marketed as a convenient tool for accessing world clocks and checking the current time in various timezones.
Upon examining TimeNow, we determined that it functions as a browser hijacker. The extension makes changes to browser settings with the intent of promoting the illegitimate search engine, zsrcunow.com, through redirects. Browser hijacking software typically involves altering homepages, default search engines, and URLs for new tabs and windows, directing them to specified promotional sites.
TimeNow carries out these modifications as well. Consequently, when you have this extension installed, opening new browser tabs or windows and entering search queries in the URL bar will result in redirection to the zsrcunow.com website.
Fake search engines often lack the capability to provide genuine search results, so they reroute users to legitimate internet search engines. At the time of our investigation, zsrcunow.com redirected to the Bing search engine (bing.com). It's important to note that the destination may vary depending on factors such as the user's geolocation.
Browser hijackers commonly employ techniques to maintain persistence, making it challenging to remove them. They may prevent access to removal-related settings or reverse changes made by users.
Additionally, software falling into this category often possesses data-tracking functionality, which may also apply to TimeNow. This means it could collect various types of information, including visited URLs, viewed webpages, search queries, internet cookies, usernames, passwords, personally identifiable details, financial data, and more. The gathered data can then be monetized by selling it to third parties.
What Are the Risks Associated With Fake Search Engines?
Fake search engines pose several risks to users and their online security. These deceptive search engines are often designed to mimic legitimate ones but are operated with malicious intent. Here are the risks associated with fake search engines:
Malware Distribution:
Fake search engines can lead users to download malicious software or malware unintentionally. They may prompt users to click on deceptive ads or download seemingly legitimate software that contains malware.
Privacy Invasion:
Fake search engines often collect user data, including search queries, IP addresses, and browsing habits. This invasion of privacy can lead to identity theft, targeted advertising, or even blackmail.
Phishing Attacks:
Some fake search engines display deceptive search results that lead to phishing websites. Users may unknowingly enter their login credentials or personal information on these sites, thinking they are legitimate.
Financial Scams:
Fake search engines can display ads or links to fraudulent websites that promote scams such as fake online shopping, investment schemes, or cryptocurrency frauds. Users may end up losing money.
Browser Hijacking:
Fake search engines can change browser settings without user consent, redirecting searches to their site or promoting malicious extensions and add-ons.
Inaccurate or Manipulated Information:
Fake search engines may provide inaccurate or biased search results, manipulating the information users receive. This can be used for disinformation campaigns or to promote specific agendas.
