Hotrend.biz

Infosec researchers classify Hotrend.biz as a browser hijacker application that targets Apple users, more specifically those on iPhones and iPads. The application doesn't rely on the users to download and install it intentionally and instead employs deceptive distribution methods associated with PUPs (Potentially Unwanted Programs). The two major strategies involve bundling and fake software updates.

The moment Hotrend.biz is installed on the user's device, it will begin to monetize its presence by taking over certain browser settings. Users will find that their usual homepage, new tab page, and the default search engine have been modified to now open a new address promoted by the browser hijackers. In most cases, the address will be that of a fake search engine.

Hotrend.biz also could infiltrate the Calendar application and begin to inject advertising materials there. Users are strongly discouraged from clicking on any of the advertisements or redirects caused by the application as they may bring them to untrustworthy third-party websites. Users could then be subjected to various tactics such as fake tech support schemes or dedicated phishing pages designed to collect all entered information. In the most threatening scenario, users could be dropped on compromised domains that are tasked with propagating serious malware threats such as RATs or ransomware.