5 ms·

It is a very simple extension. No effort to hide the malicious URL. See the source: https://crxcavator.io/source/mabdjppmcjpjploliggpbonahnjjlgkf/1.1.0?file=p

by aritmo 5y ago

It is a very simple extension. No effort to hide the malicious URL. See the source: https://crxcavator.io/source/mabdjppmcjpjploliggpbonahnjjlgkf/1.1.0?file=popup.html&platform=Chrome https://crxcavator.io/source/mabdjppmcjpjploliggpbonahnjjlgk... The malware link: hxxp://przekierowanie2.chrome_augustow.pl/?123-Microsoft525896

dividuum 5y ago
https://crxcavator.io https://crxcavator.io is nice. I always wondered by there is no direct way to easily peek into an extension's source code.
- diogenesjunior 5y ago
  There is... you can do it yourself: https://clients2.google.com/service/update2/crx?response=redirect&prodversion=[VERSION]&acceptformat=crx2,crx3&x=id%3D[ID]%26uc https://clients2.google.com/service/update2/crx?response=red... Where [VERSION] is your chrome version and [ID] is the extensions ID. Hope this helps ;)
- jakub_g 5y ago
  There's also an... extension to view the extensions: https://chrome.google.com/webstore/detail/chrome-extension-source-v/jifpbeccnghkjeaalbbjmodiffmgedin?hl=en https://chrome.google.com/webstore/detail/chrome-extension-s... If you trust it :)
deleted 5y ago
[deleted]
Trung0246 5y ago
Interesting... The domain did not considered to be malicious on VirusTotal: https://www.virustotal.com/gui/url/ab2a0f6d00de42ebf4ff8cb2c8db5db47661cccdb12e291c54c718ddab76be24/detection https://www.virustotal.com/gui/url/ab2a0f6d00de42ebf4ff8cb2c...
lgats 5y ago
the link is ://przekierowanie2-chrome.augustow.pl/?123-Microsoft525896 for those confused about the underscore in the tld