Bundle Extension

Infosec researchers examined the Bundle browser extension and confirmed that it is an intrusive PUP (Potentially Unwanted Program) equipped with browser hijacker functionalities. The application is designed mainly to take over the user's browser to monetize its presence. Browser hijackers often target the homepage, new tab page, and default search engine browser settings and change them to now open a sponsored page. In the vast majority of cases, the promoted site belongs to a fake search engine.

Affected users will notice that they are being taken to the sponsored address every time they launch the browsers, start a new tab, or initiate a search through the URL bar. It is important to keep in mind that fake search engines are incapable of producing results on their own. Instead, they might take the user's search query and further redirect it. While some users could then be shown results generated by legitimate engines, such as Yahoo, Bing, or Google, others may see low-quality results taken from dubious sources.

PUPs could represent additional risks as well. Many also are tasked with spying on the user's browsing activities. Some could even collect device details (IP address, geolocation, OS version, browser type, etc.) or try to extract sensitive information (banking details, account credentials, payment info) from the browser's autofill data.