Threat Scorecard

Ranking: 9,039
Threat Level: 50 % (Medium)
Infected Computers: 16
First Seen: September 21, 2022
Last Seen: November 1, 2022
OS(es) Affected: Windows

EmailCheckToday is supposed to be a convenient and useful browser extension that will allow users to find or reach email-related resources and services more easily. However, when installed, the application quickly shows that it is also an intrusive browser hijacker. Users will notice that their Web browser has started to redirect or open unfamiliar addresses.

More specifically, EmailCheckToday will modify the homepage, new tab page, and the default search engine and set them to open sponsored addresses. The homepage of the affected browser will now be changed to '' At the same time, when trying to search the Web via the browser's URL tab, users' search queries will be redirected to the '' website, a fake search engine. Keep in mind that in some cases, the address also could be included in the redirect chain.

Fake search engines lack the necessary functionality to generate search results on their own. Users will instead be shown results taken from additional sources. For example, has been observed to take results from the legitimate Bing engine. However, many fake engines are capable of modifying their behavior, so some users could receive low-quality and inaccurate results taken from dubious search engines.

Adware, browser hijackers, and PUPs (Potentially Unwanted Programs) often carry additional, intrusive functionalities as well. While present on the user's device, these applications may monitor the browsing activities, collect numerous device details, or try to access sensitive account credentials, banking details, payment information, etc. from the browsers' autofill data.


Most Viewed