ForSearch.net

By GoldSparrow in Browser Hijackers

Threat Scorecard

Ranking: 5,042
Threat Level: 50 % (Medium)
Infected Computers: 155
First Seen: March 25, 2017
Last Seen: September 20, 2023
OS(es) Affected: Windows

ForSearch.net is an unreliable site that is presented to users as a search service. The service on ForSearch.net does not include ownership and contact information, as well as links to the privacy policy and terms of use agreement found on legitimate pages. Visitors at ForSearch.net are greeted by a simple search box, the ForSearch logo, and three options to search with ForSearch, Google and Bing. However, these options do not lead to customized searches but to forsearch.net/search?q=%searchterm%&hl=vn&engine=bing, which is a presented as the legitimate Bing.com results page. Computer security investigators found that ForSearch.net is associated with a browser hijacker program that may change the Internet settings of users in Google Chrome, Internet Explorer, Opera and Mozilla Firefox.

The browser hijacker linked to ForSearch.net is designed to redirect users to Forsearch.net/?FORM=Z9FD1 when they open a new tab, start an online session or type in the Omnibox on Chrome. Forsearch.net/?FORM=Z9FD1 is tailored to look like Bing.com for users in Vietnam. Investigators suspect the ForSearch.net phishing portal is used to collect the login credentials for Microsoft customers. The login form at Forsearch.net/?FORM=Z9FD1 is rigged to record your input and send a copy of your username and password to whoever is behind ForSearch.net. The ForSearch.net phishing domain is a near perfect clone of Bing.com and includes the dynamic wallpaper, links to services by Microsoft and copies of the Privacy and Terms of Use Agreements at Bing.com. Computer users should keep an eye on the address bar and make sure they load the legitimate version of Bing.com to avoid ForSearch.net and links to corrupted pages.

The ForSearch.net browser hijacker may be distributed to users as a search enhancer that is bundled with free software on the Internet. You may want to use the 'Advanced' and 'Custom' option of free program installers that allow you to control the content installed on your system. Many users may link their account at Microsoft with a credit card, and the ForSearch.net browser hijacker may allow third parties to buy goods using misappropriated user credentials. If you are redirected to Forsearch.net/?FORM=Z9FD1, it is best to scan your OS with a trustworthy anti-malware scanner before you log in into your accounts on social media, online banking services and Microsoft.

URLs

ForSearch.net may call the following URLs:

forsearch.net

Related Posts

Trending

Most Viewed

Loading...