Keep it Secure Hijacker

The Keep it Secure is an intrusive browser extension that cybersecurity experts have classified as a browser hijacker. As such, its goal is to take control over users' browsers to promote a sponsored page. In this case, the PUPs (Potentially Unwanted Programs) causes redirects to a fake search engine at keepitsecure.today.

As part of its actions, the Keep it Secure Hijacker will modify the browser's new tab page and default search engine. Doing so ensures that the promoted page will be opened every time users open a new tab in the browser or try to search the web via the URL bar. Furthermore, the annoying application will establish persistence mechanisms on the system to prevent users from restoring their browsers to their previous states.

The promoted keepitsecure.today search engine is incapable of producing any results on their own. Users will instead be shown results taken from other engines, such as the legitimate Yahoo search engine. It is important to keep in mind that this behavior may change, depending on a combination of factors, such as the device's IP address, geolocation, type and more. As such, some users could be presented with questionable, low-quality results interspersed with various sponsored links and advertisements.

Another common characteristic observed in PUPs and browser hijackers is data tracking. While present on the system, the application may be continuously spying on the browsing activities and transmitting the acquired data to its operators. Users may have their browsing history, search history and clicked URLs packaged alongside numerous device details and then uploaded to a remote server. In some cases, the PUP may even try to access auto-fill information containing banking data, payment details and credit/debit card numbers.