Zodiac Search Pushes Fake Search Engine

While investigating suspicious websites, our researchers came across a deceptive page that promotes an installer featuring the Zodiac Search browser extension, marketed as a convenient tool for accessing horoscopes.

Upon examining Zodiac Search, we found it to be a browser hijacker. This extension modifies browser settings to trigger redirects to the search.zodiac-search.com fake search engine. Browser-hijacking software typically changes default search engines, homepages, and new tab/window URLs to promote specific websites.

In the case of Zodiac Search, these settings are altered to direct new browser tabs/windows and web searches conducted through the URL bar to the search.zodiac-search.com website. Fake search engines like this one often lack the ability to generate search results, so they redirect users to legitimate search sites. During our research, search.zodiac-search.com redirected to the Bing search engine (bing.com), but it's worth noting that the destination may vary based on user geolocation.

Browser hijackers frequently employ tactics to ensure persistence, making it challenging for users to remove them or reverse the changes they've made to browser settings. This complicates the removal process and hinders users from restoring their browsers to their desired configurations.

Moreover, Zodiac Search likely possesses data-tracking capabilities, potentially gathering information such as browsing and search histories, IP addresses, internet cookies, personally identifiable information, login credentials, financial data, and more. This collected data can then be monetized by selling it to third parties.

In summary, the presence of software like Zodiac Search on your devices can lead to system infections, severe privacy breaches, financial losses, and identity theft.

What Are Fake Search Engines?

Fake search engines are deceptive or fraudulent websites that mimic legitimate search engines but often serve malicious or misleading purposes. These websites are designed to resemble well-known search engines like Google, Bing, or Yahoo in appearance and functionality, but they typically function in ways that are harmful to users. Here are some common characteristics and purposes of fake search engines:

• Misleading Search Results: Fake search engines may provide search results that are manipulated or irrelevant to the user's query. These results can lead users to potentially harmful websites, including those hosting malware, scams, or phishing attempts.
• Browser Hijacking: Some fake search engines alter a user's browser settings, such as the default homepage, search engine, or new tab page, without their consent. This can make it difficult for users to revert to their preferred settings.
• Adware and Unwanted Pop-ups: Fake search engines often display excessive advertisements, pop-ups, and sponsored links. These ads can be intrusive and disrupt the user's browsing experience.
• Data Collection: Many fake search engines collect user data, including search queries, browsing history, IP addresses, and more, often without the user's knowledge or consent. This data can be used for tracking, profiling, or even sold to third-party advertisers.
• Promotion of Unwanted Software: Some fake search engines may promote or distribute potentially unwanted software, adware, or browser extensions. Users who interact with these websites may unknowingly download and install unwanted software on their devices.
• Phishing and Scams: Fake search engines can be used in phishing schemes to trick users into revealing sensitive information, such as login credentials, credit card details, or personal information. They may also promote fraudulent offers or scams.
• Browser Redirects: Fake search engines may redirect users to other websites, including malicious or scam sites. These redirects can occur when users click on search results or engage with the fake search engine's interface.
• Difficult Removal: Some fake search engines employ techniques to resist removal from a user's browser, making it challenging for individuals to regain control of their browser settings.