Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Abertura e-mail

CRITICAL RISKRemoved from Chrome Web Store

Abertura e-mail

ID: effdkejdjjcmhhkhainkackllfkbbhbm

Could be malicious

Extension Info & Metadata

Status

Removed

Version

1.0

Size

0.02 MB

Rating

2.2/5

Reviews

Users

343,376

Type

Extension

Updated

Jul 17, 2020

Publisher Contextual Analysis

Author: selecao-mensagen.comView Profile
MX records exist: No
Domain exists: Yes
Is disposable: No
Is role-based: Yes
Mailbox exists: No

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

343,376

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Selecione o seu serviço de mensagens

Use o nosso plug-in para enviar os seus e-mails diretamente, sem precisar de escolher cada serviço de e-mail que deseja usar. Depois de definir o seu serviço de e-mail preferido, precisará apenas de um clique para abrir uma nova guia automaticamente com a sua caixa de correio preferida. Envie quantos e-mails desejar e, acima de tudo, poupe tempo! Depois de instalada no seu navegador, a extensão "Abertura e-mail " permite que, nas páginas de contacto dos sites, envie um e-mail através do seu serviço de mensagens preferido. Um simples clique no botão "Contacto" ou no ícone "E-mail" é suficiente para chegar diretamente ao seu serviço de mensagens. Assim, em alguns segundos, pode escrever o seu e-mail e enviá-lo ao seu destinatário. Precisa de alterar o seu serviço de mensagens padrão? Pode selecionar uma nova caixa de correio favorita a qualquer momento no nosso plugin. O plug-in protege os seus dados pessoais e não armazena o histórico de navegação. Ao instalar a " Abertura e-mail ", aceita a nossa política de privacidade.

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical1

High2

Medium2

Low0

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.0 Code review	5

Extension Version	Code Review Findings
1.0	5

Files with findings

3 distinct paths — top paths by unique finding count:

newMailBackground.js2
newMailContentScript.js2
newMailContentStyle.css1

S.No.	Category	Severity	File	Summary	Found in Version
1	Code Injection	critical	newMailContentScript.js (line 83)	The content script reads a base64-encoded value from localStorage under the key 'opennewmail', decodes it with atob(), and injects it as raw HTML via innerHTML into the body of every page the user visits. This is a cl…	1.0
2	Remote Code Loading	high	newMailBackground.js (line 2)	On first install the extension silently opens a tab to 'selecao-mensagen.com/info/success', a domain entirely unrelated to any legitimate email provider. This page runs in the browser with access to localStorage and c…	1.0
3	Unauthorized Data Collection	high	newMailContentScript.js (line 4)	The content script defines cookie read and write helpers (newMailGetCookie / newMailSetCookie) that operate on document.cookie of whichever page it runs on. Because the content script matches <all_urls>, these functio…	1.0
4	Other	medium	newMailBackground.js (line 45)	When any mailbox URL is updated the background page broadcasts a message to every open tab (not just the active one). Combined with the content script's onMessage listener that updates internal state on receipt of 'up…	1.0
5	Phishing	medium	newMailContentStyle.css (line 24)	The injected CSS defines a full-viewport fixed overlay (position:fixed; width:100%; height:100%; z-index up to 9000 as set from JS) that can obscure any web page. When combined with the innerHTML injection vector abov…	1.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


www.selecao-mensagen.com	/info/success	https://www.selecao-mensagen.com/info/success
mail.google.com	/mail/u/0/	https://mail.google.com/mail/u/0/?view=cm&fs=1&to=_EMAIL_&tf=1
compose.mail.yahoo.com	-	https://compose.mail.yahoo.com/?to=_EMAIL_
outlook.live.com	/mail/0/deeplink/compose	https://outlook.live.com/mail/0/deeplink/compose?to=_EMAIL_
clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

2.0 out of 5 · 6 most recent reviews

Text reviews

Positive

Negative

mouto bom

Julia Karoline Nery Guarim·18 Oct 2020

muito ruim..... péssimo

Sargento Elétrico Official·13 Oct 2020

Não instalem essa extensão, ela instala um ADWARE chamado ADS X que atrapalha a pesquisa no google

Bianca Souto Mota·7 Oct 2020

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Abertura e-mail

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 1 Version5

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating