Task List Browser Extension
While investigating suspicious websites, our researchers came across the Task List browser extension, which is marketed as a task management tool facilitating the creation of to-do lists.
Upon thorough examination, we determined that this software functions as a browser hijacker. Task List modifies browser settings to induce redirects and, additionally, monitors users' browsing activities. The extension alters default search engines, homepages, and new tab/window URLs of browsers. Typically, browser-hijacking software redirects to fake search engine addresses, leading users to legitimate search engines as a workaround.
However, Task List takes a direct route, redirecting users straight to the Bing search engine without any intermediaries. It's worth noting that user geolocation may influence the redirection to different sites.
Browser hijackers often employ persistent mechanisms to ensure longevity, such as restricting access to removal-related settings or reversing user-initiated changes to impede browser recovery.
Moreover, Task List possesses data-tracking capabilities, a common trait in software of this classification. Information of interest encompasses visited URLs, viewed pages, search queries, Internet cookies, usernames/passwords, personally identifiable details, financial data, etc. This sensitive information could be monetized through sale to third parties, potentially including cybercriminals.
How Are Browser Hijackers Distributed Online?
Browser hijackers are typically distributed online using various deceptive tactics. Here are common methods employed by cybercriminals to distribute browser hijackers:
Bundled Software Installers:
One prevalent method involves bundling the browser hijacker with legitimate software. Users might unknowingly install the hijacker when downloading and installing seemingly harmless applications or freeware. It's crucial to opt for custom or advanced installation options and carefully review each step to avoid unwanted additions.
Malicious Websites and Pop-ups:
Visiting malicious websites or clicking on pop-up ads can trigger automatic downloads of browser hijackers. These websites may employ social engineering techniques to convince users to install seemingly beneficial software, leading to unintended browser modifications.
Fake Software Updates:
Cybercriminals often create fake software update prompts that appear legitimate. Users might be prompted to update their browsers or other software, and in the process, unintentionally install a browser hijacker. It's advisable to only update software through official sources.
Infected Email Attachments:
Browser hijackers can be distributed through malicious email attachments. Users may receive seemingly harmless emails with attachments that, when opened, initiate the installation of the hijacker. It's crucial to exercise caution and avoid opening attachments from unknown or suspicious sources.
Freeware and Shareware Platforms:
Browser hijackers may be disguised as seemingly useful browser extensions or add-ons available on freeware or shareware platforms. Users might download these extensions believing they enhance their browsing experience, only to discover unwanted modifications to their browser settings.
