Threat Database Adware Cartwise Ads

Cartwise Ads

By GoldSparrow in Adware

Threat Scorecard

Threat Level: 20 % (Normal)
Infected Computers: 55
First Seen: September 19, 2023
Last Seen: September 21, 2023

The Cartwise software from h[tt]ps://cartwise[.]me/ is promoted as a shopping enhancer that supports Web browsers such as Google Chrome, Mozilla Firefox, Opera and Safari. The official page on h[tt]ps://cartwise[.]me/ suggests that the Cartwise browser extension shows the best prices on Amazon and the Time Magazine has commented on it saying "It's basically free money." However, we did not find articles on h[tt]p://time[.]com/ that mention Cartwise. The makers of the Cartwise extension went as far as adding logos of Busine Insider, Mashable, BuzzFeed and Forbes to their site implying that their product is widely recognized as a secure shopping enhancer. There is no evidence that suggests Cartwise is recognized by any of the online authorities mentioned on cartwise[.]me. Additionally, we have received complaints from users that Cartwise generates pop-up windows from shoppingwise[.]me.

The Cartwise program is distributed via ads on sites with pornographic content, which is locked behind a fake "verification process." Owners of pornographic sites on the Internet might suggest visitors that they need to pass the 'Google reCAPTCH v2' challenge to verify that they are humans before accessing their desired content. It should be noted that Google Inc. is not affiliated in any way with the "Google reCAPTCH v2" service on pornographic sites. Following the instructions on the "Google reCAPTCH v2" page users are redirected to a page that says "Please add Google Cartwise Verification to continue," and Web surfers might choose to install the Cartwise extension believing it is published by Google. Computer security researchers found that Google does not index the Cartwise extension and its product page on the Chrome Web Store — chrome.google.com/webstore/detail/cartwise/pkpbjbmdcfbhlfidaecfeggphckclcjp — it can be accessed only via the 'Get Cartwise For Free' button on h[tt]ps://cartwise[.]me/. Clicking the 'Get Cartwise For Free' button loads the URL: h[tt]ps://chrome.google[.]com/webstore/detail/cartwise/pkpbjbmdcfbhlfidaecfeggphckclcjp?utm_source=inline-install-disabled, which enables users to add the Cartwise extension to Chrome. The Cartwise extension requires rights to read and change the data you exchange on the Internet with sites.

The Cartwise program from h[tt]ps://cartwise[.]me/ is classified as an adware that loads tracking cookies and Web beacons in the browsers of the users, generates pop-up windows, and may cause unwanted redirects to phishing pages. The Cartwise adware is found to use logos of trusted Internet companies and fake user reviews to incite users to install it. The developers behind the Cartwise adware are reported to utilize custom URLs pointing to products on Amazon. The custom URLs allow the Cartwise app to download a cookie (the software one) onto the user's PC and generate money for its creators if you buy the products advertised via the tailor-made links. The Web traffic facilitated by Cartwise may not be filtered by ad blockers and Web filtering services. It is recommended to remove the Cartwise adware and clean the tracking beacons it downloaded by using a trusted anti-spyware utility.

URLs

Cartwise Ads may call the following URLs:

therefoortowa.com

Trending

Most Viewed

Loading...