XI New Tab Browser Extension
XI New Tab is a deceitful browser extension that falsely promises to provide users with browser wallpapers. Our research team identified this extension during an investigation into untrustworthy websites.
Upon examining XI New Tab, we uncovered its activities involving the manipulation of browser settings with the intention of directing users to the xitabs.com fake search engine through redirects. This behavior categorizes the extension as a form of browser-hijacking software.
Browser hijackers typically alter default search engines, homepages, and the URLs for new browser tabs/windows to promote specific websites.
In a similar manner, XI New Tab adjusts browser settings, leading to the following consequences when the extension is installed: Searches conducted via the URL bar and the opening of new browser tabs/windows result in automatic redirection to the xitabs.com website.
Illegitimate search engines seldom provide meaningful search results, often rerouting users to authentic Internet search platforms. During our research, xitabs.com was observed to redirect users to the Bing search engine (bing.com). However, it's important to note that these redirections could vary due to factors like user location.
Browser-hijacking software frequently employs techniques to persistently embed itself, making removal challenging and preventing users from restoring their browsers to their original state.
Additionally, this type of software often possesses the capability to track user data, a characteristic that might apply to XI New Tab as well. This data collection can encompass visited URLs, viewed web pages, search queries, cookies, login credentials, personal information, financial data, and more. Collected data could be sold to third parties or exploited for profit in various ways.
What Are Fake Search Engines?
Fake search engines are websites that mimic legitimate search engines but are designed to manipulate search results, display misleading advertisements, track user data, or even distribute malware. These malicious or deceptive search engines often aim to redirect users to specific websites, generate revenue through ad clicks, or gather sensitive information for malicious purposes.
Here are some common characteristics and risks associated with fake search engines:
Deceptive Appearance: Fake search engines may closely resemble well-known and reputable search engines, using similar logos, layouts, and search bars. This can deceive users into believing they are using a legitimate search engine.
Manipulated Search Results: These search engines often alter search results to prioritize certain websites, products, or services that may not be relevant to the user's query. The intention is to drive traffic to specific websites for financial gain.
Misleading Advertisements: Fake search engines may display misleading or malicious advertisements, enticing users to click on them. Clicking on these ads could lead users to unsafe websites or even trigger malware downloads.
Browser Hijacking: Some fake search engines modify browser settings without the user's consent, changing the default search engine, homepage, or new tab URLs. This can be a part of a larger scheme to control the user's online experience.
Data Collection: Many fake search engines track users' search queries, browsing history, and other personal information. This data can be used for targeted advertising or even sold to third parties, posing a significant privacy risk.
Phishing and Malware Distribution: Some fake search engines are used to distribute phishing links or malware. Users may unknowingly download malicious software or reveal sensitive information to attackers.
Poor Search Quality: Since fake search engines prioritize specific websites or advertisements, the search results may lack the relevance and reliability of legitimate search engines.
