UltraWebFormat
Threat Scorecard
EnigmaSoft Threat Scorecard
EnigmaSoft Threat Scorecards are assessment reports for different malware threats which have been collected and analyzed by our research team. EnigmaSoft Threat Scorecards evaluate and rank threats using several metrics including real-world and potential risk factors, trends, frequency, prevalence, and persistence. EnigmaSoft Threat Scorecards are updated regularly based on our research data and metrics and are useful for a wide range of computer users, from end users seeking solutions to remove malware from their systems to security experts analyzing threats.
EnigmaSoft Threat Scorecards display a variety of useful information, including:
Ranking: The ranking of a particular threat in EnigmaSoft’s Threat Database.
Severity Level: The determined severity level of an object, represented numerically, based on our risk modeling process and research, as explained in our Threat Assessment Criteria.
Infected Computers: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
See also Threat Assessment Criteria.
| Threat Level: | 50 % (Medium) |
| Infected Computers: | 8 |
| First Seen: | January 25, 2019 |
| Last Seen: | August 13, 2022 |
| OS(es) Affected: | Windows |
UltraWebFormat is yet another browser hijacker application that targets Mac users. As is often the case, users do not usually download and install such applications intentionally. Instead, adware, browser hijackers, and other PUPs (Potentially Unwanted Programs) rely on deceptive distribution tactics to spread themselves. By being bundled with another more popular freeware application or hiding inside a fake installer/updater, PUPs attempt to mask the fact that they will be installed on the user's Mac system.
However, once there, their presence will be felt almost immediately. UltraWebFormat will take over the browser's homepage, new tab page, and the default search engine in a scheme to promote and generate artificial traffic towards a sponsored address. In this case, all three settings will be set to open search.7ax6.com, a fake search engine. Furthermore, on Chrome browsers, UltraWebFormat will take advantage of the legitimate 'Managed by your organization' feature to limit the options available to the user.
Fake search engines lack even the most basic functionality as they cannot produce search results on their own. Any search query initiated by the user via the search.7ax6.com page or the URL address in the Web browser, will either be redirected to a legitimate search engine directly or taken through a redirect chain involving multiple dubious search engines. However, the biggest red flag associated with the presence of browser hijackers on your system, is that it almost always spy on the user's browsing activities. Information such as browsing history, conducted searches, clicked URLs, IP address, geolocation, and more, could be collected and then uploaded to remote servers.
