Dragon Search Solutions Browser Extension
We discovered that Dragon Search Solutions operates as a browser hijacker, primarily aiming to endorse a counterfeit search engine by altering the settings of the affected browser. Furthermore, Dragon Search Solutions possesses the capability to access specific user data.
To hijack web browsers, Dragon Search Solutions compels users to utilize dragonboss.solutions when initiating search queries or opening the hijacked browser, including new tabs. This is achieved by configuring dragonboss.solutions as the default search engine, homepage, and new tab page. As previously noted, dragonboss.solutions is a fraudulent search engine.
When users input a search query, dragonboss.solutions redirects them to bing.com via searchingdb.com, another suspicious domain. Ultimately, users receive search results from Bing, a legitimate search engine. In essence, dragonboss.solutions does not generate any results itself. Given that it's a bogus search engine promoted through a browser hijacker, it's advisable to steer clear of it.
Fake search engines should be avoided due to their tendency to prioritize displaying deceptive or irrelevant search results, potentially guiding users to harmful websites or exposing them to malicious content. Additionally, fake search engines may gather and misuse users' data.
In addition to promoting dragonboss.solutions, Dragon Search Solutions has the ability to peruse browsing history. This implies that the extension can gather information regarding the websites visited by the user, including the URLs of visited pages, timestamps of visits, and conceivably other browsing-related data.
How Are Rogue Browser Extensions Usually Distributed?
Rogue browser extensions are typically distributed through various deceptive tactics and channels. Here are some common methods used to distribute rogue browser extensions:
Fake Websites and Download Portals: Cybercriminals create fake websites or download portals that mimic legitimate software distribution platforms. Users searching for browser extensions may unknowingly download rogue extensions from these sites, believing them to be genuine.
Malicious Links in Emails and Messages: Attackers send phishing emails or messages containing links to malicious websites or downloads. These links may lead users to fake extension download pages or directly initiate the download of rogue browser extensions onto their systems.
Bundled Software: Rogue browser extensions may be bundled with legitimate software downloads, especially freeware or shareware applications. Users who hastily install software without carefully reviewing the installation process may inadvertently install the bundled rogue extensions as well.
Malvertising: Malicious advertisements, or malvertisements, displayed on legitimate websites may redirect users to sites hosting rogue browser extensions. Clicking on these ads can lead to automatic downloads of the rogue extensions onto users' systems.
Browser Redirects: Rogue browser extensions may manipulate browser settings to redirect users to fake extension download pages or malicious websites. Users may encounter these redirects while browsing the web or as a result of visiting compromised websites.
Social Engineering Tactics: Cybercriminals may use social engineering tactics to trick users into installing rogue browser extensions. This could involve impersonating trusted entities or presenting fake alerts or messages claiming that the extension is necessary for security or functionality purposes.
