[Possibly solved, please look at comments]

Hey,

so recently a family member accidentally downloaded a shady browser extension called: "Easy Print" on Firefox. 30k downloads, no ratings, weird "offical" website and installed accidentally trying to buy tickets. I assume it showed something along the lines of: "Buy ticket now" and they just clicked on it (being overall inexperieced with security). Only extension installed was uBlock until then.

I won't post a link just in case, but you can easily find it by googling: "Easy Print Firefox" or "Easy Print App" for their website.

What makes this weirder is that they change the default search engine to Yahoo, which for me was always a red flag for a hijacked browser.

I uninstalled it, but am concerned that they installed something like a keylogger along with it.

Can anyone help me what this is and, especially, how I can properly teach them the basics of internet safety? Not the first time their PC/browser was filled with unwanted stuff...

Thank you and best regards!