Key Web Hijacker

Threat Scorecard

Ranking: 11,507
Threat Level: 50 % (Medium)
Infected Computers: 150
First Seen: January 25, 2019
Last Seen: August 14, 2023
OS(es) Affected: Windows

Key Web is a browser extension that cybersecurity researchers have exposed for having intrusive browser hijacker capabilities. Once installed on the system, the application will take over specific browser settings to promote a sponsored page. In this case, the intruder application is tasked with diverting artificial traffic towards the keysearchs.com address.

Typically, after getting onto the user's device, the browser hijacker program will modify the homepage, new tab page, and default search engine of the installed Web browsers. All three will be set to open the promoted page, and users may even be prevented from making any further changes such as trying to revert the settings to their previous state.

As for keysearchs.com, it has been classified as a fake search engine, meaning that it cannot produce any results on its own. Any search queries carried via keysearchs.com will be redirected to other engines. The exact behavior and the source of the results shown to users could change, based on a multitude of factors, such as IP address, geolocation, browser and device type and more.

Indeed, some users may be presented with results that keysearchs.com has taken from Google directly. However, others could see their queries being redirected to pages such as my-search.com and trafficjunction.com before finally getting results from Bing.

Another important fact that must be taken into account when dealing with PUPs (Potentially Unwanted Programs) is that they are oftentimes equipped with data-tracking capabilities. The invasive applications could be continuously spying on the user's online activities by accessing the browsing history, search history and every clicked URL. Information such as important device details and even sensitive banking details or payment data may also be included in the data-harvesting routines.

URLs

Key Web Hijacker may call the following URLs:

lx.bbaxx.xyz/ins

Trending

Most Viewed

Loading...