The Search Engine Hijack
macOS comes tightly integrated with Safari, which relies on a default search engine (usually Google) for any queries typed directly into the address bar. Occasionally, you might find that your default search engine has suddenly changed to Yahoo, Bing, or a completely unknown search portal. This is rarely a bug in macOS itself; rather, it is almost always the result of a rogue Safari extension or a deceptive piece of adware that you inadvertently installed while downloading a “free” utility or fake Flash Player update. These malicious profiles quietly alter Safari’s core settings to siphon your search traffic for ad revenue.
Removing Unwanted Profiles
To secure your browser and stop macOS from automatically changing your default search engine in Safari, you must purge the system of malicious configuration profiles and unauthorized extensions.
First, check for system-level hijacking. Click the Apple logo and select System Settings. Search the sidebar for a menu called Profiles (if this menu does not exist, you do not have any installed profiles). If it does exist, open it and look for any “AdminPrefs” or strangely named profiles you did not intentionally install. Select the suspicious profile and click the minus (-) button to delete it; this instantly removes the forced settings. Next, launch Safari. In the top menu bar, click Safari > Settings (or Preferences). Go to the Extensions tab. Look for any extensions you do not recognize (common adware names include “SearchTool,” “AnySearch,” or completely blank names). Click on the rogue extension and select Uninstall. Finally, navigate to the Search tab in Safari Settings and change the “Search engine” dropdown back to your preferred provider.