Canvas Tab

Threat Scorecard

Threat Level: 50 % (Medium)
Infected Computers: 2
First Seen: November 23, 2022
Last Seen: November 24, 2022

The Canvas tab is a browser extension that is being promoted on its own official page. It is presented to users as a convenient tool that will allow them to draw on the new browser tabs they open and then save the created artwork. However, once activated on their device, users will quickly realize that the Canvas tab also has some browser-hijacker capabilities that have impacted several, important settings of their browsers.

More specifically, the application will take control over the browsers' new tab page, homepage and default search engine. All of the modified settings will now begin redirecting to a promoted Web address. The Canvas tab generates artificial traffic toward, a fake search engine. Fake engines are not equipped with the functionality necessary to produce search results on their own. Users will instead receive results taken from a different source. In this case, the initiated search queries will be further redirected through the legitimate Bing search engine. It is essential to keep in mind that some browser hijackers can adjust the sources of the displayed results based on factors, such as users' IP addresses and geolocations.

Another risk often associated with adware, browser hijackers, and PUPs (Potentially Unwanted Programs) is the possibility of the invasive application having data-tracking capabilities. These could manifest in the application's ability to monitor the browsing activities carried on the device, collect device details or even extract sensitive data from browsers' autofill data. In the last case, users may have confidential information, such as account credentials, banking details or credit/debit card numbers compromised.


Most Viewed