Skip to content

Remove Bing and Yahoo Redirect Malware from Safari on Mac

Safari browser is set to Google search, but a malware or script injection could trick settings and redirect to Bing or Yahoo as a search engine.

In such cases, you can remove the malware-added extensions, clear browser data, remove suspicious apps, and delete unknown profiles to stop the search engine from redirecting.

Method 1: Remove Malware Extensions

Suspicious third-party extensions often change specific settings inside your browser, which changes your browser’s default homepage or search page. Once you have spotted the issue, your next move should be to remove extensions from your system immediately.

  1. Open the Safari browser app on your Mac.
  2. Click on the Safari menu and select the Preferences/Settings sub-menu.
    Safari Preferences MenuIt will open the Preferences/Settings window.
  3. Switch to the Extensions tab.
  4. Lookup for suspicious extensions installed.
    Uninstall the Safari Browser Extensions
  5. Select the extension, and hit Uninstall to remove it from Safari.

It will immediately remove the extension and make the browser less vulnerable to redirect and malware attacks.

Method 2: Change Homepage Settings

If you are being redirected to Bing or Yahoo whenever you press a new tab, this is because of your homepage settings. You can keep any web URL as a homepage in the Safari browser.

However, some extensions can change these settings by showing you specific prompts on your screen, and if you agree to them, extensions will change the homepage settings. Here how you can revert back:

  1. Open the Safari app on your Mac.
  2. Click on the Safari menu and select the Preferences/Settings sub-menu.
    Safari Preferences MenuIt will open the Safari Preferences window.
  3. Switch to the General tab, and set a preferred homepage for your Safari browser.
    Set a Custom Home Page URL in Safari settings
  4. Again, switch to the Search tab, and set your default search engine.
    Set Google as Search Engine in Safari browser

Relaunch the browser after making the necessary changes to check if it still redirect.

Method 3: Clear Temporary Browser data

Another precaution is to clear your browser cache and history. However, it will delete all your previous activities from the browser.

  1. Launch the Apple Safari browser.
  2. Click on the Safari menu and select the Preferences sub-menu.
  3. Switch to the Advanced tab.
  4. Enable the check box for the Show Develop menu in the menu bar.
    Show Develop menu in menubar on SafariIt will enable a new Develop menu in the Safari menu bar.
  5. Click on the Develop menu on the menu bar.
  6. Select Empty Caches from the drop-down menu.
    Empty Cache from Develop menu in Safari MacIt will clear and empty all the cache files stored within the Safari browser.
  7. Next, Click on the History menu on the menu bar.
  8. Click on the Clear History… option.
    Clear History command under History menubar in SafariIt will display a clear history dialog box on the screen.
  9. Choose a suitable time frame and click on the Clear History button.
    Clear History from Safari browser

It will delete and clear the Cache data and History from the Safari browser.

Method 4: Check Activity Monitor

Activity monitor keeps details of all apps and processes running on your machine. It will detect if your Mac is infected with some script or suspicious process. You can close these unwanted process to stop the redirection malware.

[Note]Note: Proceed cautiously; killing a system process may freeze your machine.[/Note]

  1. Open the Activity Monitor app on your Mac.
    Activity Monitor app in Mac OSYou can open it by going to the Utility folder in the Launchpad.
  2. Lookup for any suspicious process in Activity Monitor.
    Activity Monitor processes thread
  3. Select and click on the X on the process.
  4. Hit on Force Quit command button.
    Force Quit command in Activity Monitor app

Now the malware/suspicious process is gone, you won’t see any Bing/Yahoo redirects in the browser.

Method 5: Delete Unknown Profiles

Mac uses a profile system to have a separate users space with login credential. Make sure your Mac does not have any unidentified profiles, if you do, then delete it immediately.

  1. Click on Apple apple logo for the menu list.
  2. Select System Preferences/Settings menu.
    It will open the System Preferences/Settings window.
  3. Click on the Privacy and Security setting icon.
  4. Scroll down to the bottom and select the Profiles option.
  5. Find any Suspicious profiles which you haven’t created.
  6. Select the profile, and click on the sign to delete.
    Remove Profiles from the Mac Computer

It will remove the User Profiles you haven’t created or are deceptive.

Method 6: Remove Suspicious Mac Apps

The redirecting problem may be due to some suspicious app changing your browser history and settings. So it’s a good idea to check what apps you are using and remove apps you don’t identify or remember installing on your Mac.

Every time you install a new Application or Software not from App Store, remember to read what changes it will make to the system.

Visit Applications folder within your Mac and check each application to identify any suspicious app.

Method 7: Check Login Items

Login items load when on your Mac startup. If the malware is added to Login Item that causing a Bing/ Yahoo redirect. Remove such suspicious entries from login items.

  1. Click on Apple apple logo for the menu list.
  2. Select System Preferences/Settings menu.
    It will open the System Preferences window.
  3. Select the Users & Groups tab.
    Users and Group tab menu in System Preferences Mac
  4. Switch to the Login Items tab.
  5. Find any suspicious login items which you haven’t installed yourself.
  6. Select the Login item, and click on the sign to delete.
    Remove Login Items from Mac Users and Group

After the system startup, it will remove the login item and not start the application listed under Login items.

info icon
Note: You need to click on the Padlock padlock icon icon at the bottom to make changes like removing the login items.

Bottom Line

Many users are unaware of malware and continue to work with browser app. Over the period, the malware can be migrated into different system that can cause major issue.

Always keep a check on the installed applications, browser extensions, and software programs running at the launch. If you identify anything suspicous, immediately remove from your system.

Most of the malware gain the control over the Mac system and also inject the adware which can lead to scam.

Please share the article if you find it helpful:

Disclosure: This page may contain affiliate links, which means we may receive compensation for your purchases; of course at no extra cost to you (indeed, you may get special discounts).
Kushal Azza

Kushal Azza

Kushal Azza is a Google Certified Analytics & IT Professional, Digital Content Creator, and Go-To Digital Marketer with an Engineering Degree. He has over a decade of experience solving tech problems, troubleshooting, and innovating digital solutions. Follow him on Twitter and LinkedIn.

Leave a thought or feedback

Please leave a descriptive comment or feedback with your real name. Our human moderator vets every comment, and it may take 24 to 48 hours to get published or rejected.
Your email address will not be published, and we will never spam your inbox. Required fields are marked *