Neptun Tab

The Neptune Tab is a browser extension that allows users to customize their browser's homepage and new tab page by changing their appearance or adding various convenient widgets. Unfortunately, infosec researchers have determined that apart from that functionality, the Neptun Tab also acts as an intrusive browser hijacker. Not to mention that the application may be distributed via fake Google Chrome updates, which makes it a PUP (Potentially Unwanted Program) as well. 

Browser hijackers are invasive programs designed to promote dubious or compromised websites that would otherwise be completely ignored by users. More specifically, the promoted pages are usually fake search engines. The Neptun Tab is not an exception, as it causes redirects to the search.neptuntab.com fake search engine.

To achieve its goal, the application will assume control over the user's browsers. It will modify the homepage, new tab page, and default search engine settings. In practice, this means that whenever users launch the affected browser, open a new tab, or try to search the Web via the browser's URL bar, they will be redirected to the sponsored address.

The main characteristic of a fake search engine is that it cannot produce any results on its own. Instead, it will take the entered search queries and further redirect them - search.neptunetab.com will show results taken from Google. Users should keep in mind that the behavior of the fake engine may differ on their system based on a combination of factors, such as the IP address, geolocation, browser type, device type and more. 

The Neptune Tab also could be spying on the browsing activities carried out on the system. It may monitor the pages opened by users, their search queries and more. PUPs also are known for potentially being able to extract numerous device details, and even sensitive data, such as account credentials, banking details and payment information.