Threat Scorecard

Threat Level: 50 % (Medium)
Infected Computers: 1
First Seen: September 14, 2022
Last Seen: September 15, 2022
OS(es) Affected: Windows

CoolADSBlockSearch is a browser extension that is supposed to help users achieve a far better experience while browsing the Internet, by reducing the number of advertisements they might encounter. Unfortunately, this doesn't appear to be the main focus of the application. Instead, it acts as an intrusive browser hijacker that will take control over certain important settings of users' Web browser.

Browser hijackers typically target the browser's homepage, new tab page, and default search engine. By changing these settings to now open a sponsored address, the intrusive application will begin generating artificial traffic towards it. After all, redirects to the promoted page will take place every time the affected browser is launched, users open a new tab, or try to initiate a search via the URL bar.

Another common characteristic is that the unfamiliar address users will start seeing will belong to a fake search engine. CoolADSBlockSearch is not an exception as it promotes the address. This fake engine will take users' search queries and further redirect them to other sources that can generate results. However, the exact destinations of the redirects could be determined by various factors, such as the exact IP address/geolocation of each user. Indeed, has been observed taking results from the legitimate Yahoo search engine or going to the dubious engine that delivers low-quality results often filled with sponsored advertisements.

Having a browser hijacker or PUP (Potentially Unwanted Program) active on your device could lead to additional risks, as well. Many of these applications are equipped with data-tracking capabilities. They may monitor the users' browsing activities and collect their search history, browsing history, clicked URLs and more. Some PUP may even try to access sensitive information stored in the browser's autofill data, such as usernames, passwords, banking details, etc.


CoolADSBlockSearch may call the following URLs:


Most Viewed