Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: AdBlock 360

CRITICAL RISKRemoved from Chrome Web Store

AdBlock 360

ID: ldgabcbecodieefbgddblclofinmogmp

Could be malicious

Supported Languages

🇧🇷Brazilian Portuguese

🇳🇱Dutch

🇺🇸English

🇫🇷French

🇩🇪German

🇮🇹Italian

🇪🇸Spanish

🇸🇪Swedish

Extension Info & Metadata

Status

Removed

Version

1.0.0

Size

0.22 MB

Rating

3.9/5

Reviews

Users

155

Type

Extension

Updated

Sep 17, 2024

Publisher Contextual Analysis

Author: lukaspenyokView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

469

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Blocks popups, ads, trackers from our block list and auto skip youtube ads

The Adblock browser extension is your all-in-one solution for a cleaner, faster, and more private browsing experience. It effectively blocks annoying popups, ads, and trackers using an advanced block list, ensuring uninterrupted web surfing. Additionally, automatically skips prerolls, allowing you to enjoy videos without delays. Whether you're looking for a smoother online experience or enhanced privacy, Adblock has you covered.

User Growth

Showing data from Sep 17, 2024 to Oct 15, 2024

Versions

No change in user count

Compared to 28 days ago

1 version released in this period

Rating Count

Total: 7 ratings

Average Rating

Current: 3.86 / 5.0+3.86

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical4

High1

Medium1

Low0

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.0.0 Code review	6

Extension Version	Code Review Findings
1.0.0	6

Files with findings

2 distinct paths — top paths by unique finding count:

js/service_worker.js4
js/content.js2

S.No.	Category	Severity	File	Summary	Found in Version
1	Data Exfiltration	critical	js/content.js (line 41)	When the user searches on Google, Bing, or Yahoo, this function extracts the raw search query from the URL and redirects `window.location.href` to `https://abslocks.com/app/update` with `system`, `version`, and `q` (s…	1.0.0
2	Network Interception	critical	js/service_worker.js (line 176)	The `p()` function POSTs to `https://abslocks.com/config` and blindly applies whatever `rules` array the server returns as live `declarativeNetRequest` dynamic rules. This gives the C2 operator the ability to remotely…	1.0.0
3	Other	critical	js/content.js (line 67)	Search hijacking is gated behind two storage flags: `adb360_a_f_e` (feature-enabled flag) and `adb360_a_a_t` (a timestamp set to `Date.now() + 3600000` at install time). The malicious redirect only fires after a 1-hou…	1.0.0
4	Privilege Escalation	critical	js/service_worker.js (line 231)	The manifest declares `externally_connectable.matches: ["http:///", "https:///"]`, so any webpage — including attacker-controlled pages — can send an `EnableConfig` message to this extension. Receiving that messag…	1.0.0
5	Other	high	js/service_worker.js (line 95)	Immediately on installation, the extension silently closes any open Chrome Web Store or Edge Add-ons tabs. This is a deliberate anti-forensic measure: it destroys the browser history entry the user might use to review…	1.0.0
6	Tracking	medium	js/service_worker.js (line 153)	The content script monitors every keydown event and sends a `protect` message to the service worker whenever the user attempts to open DevTools (Ctrl+Shift+I/J/C/U, F12). The service worker covertly increments a count…	1.0.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


abslocks.com	/config	https://abslocks.com/config
abslands.com	/page	https://abslands.com/page
chrome.google.com	/webstore/detail/	https://chrome.google.com/webstore/detail/
microsoftedge.microsoft.com	/addons/detail/	https://microsoftedge.microsoft.com/addons/detail/
abslocks.com	/app/update	https://abslocks.com/app/update
abslocks.com	/config/update	https://abslocks.com/config/update
abslands.com	/uninstall	https://abslands.com/uninstall?subid=
*	/*	http:///
*	/*	https:///
clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


146.59.188.42	IPv4	-
35.193.89.147	IPv4	-
35.188.14.213	IPv4	-
35.184.169.188	IPv4	-
78.140.130.88	IPv4	-
23.236.55.237	IPv4	-
130.211.230.53	IPv4	-
178.17.164.58	IPv4	-
78.140.130.91	IPv4	-
188.72.219.36	IPv4	-
185.165.169.108	IPv4	-
185.193.38.148	IPv4	-
35.194.26.233	IPv4	-
35.239.57.233	IPv4	-
45.32.105.134	IPv4	-
77.162.125.199	IPv4	-
216.18.176.4	IPv4	-

Showing 1 to 17 of 20 rows

Rows per page:

2.3 out of 5 · 3 most recent reviews

Text reviews

Positive

Negative

non funziona

Maurizio Lepri·24 Sept 2024

Doesnt work, Put it on my chrome, and then visited facebook, still got ads, visited Yahoo mail, still got ads, visited a news site ads still there. Removing it now

Shane Redfern·22 Sept 2024

Works smooth and always helpful. I recommend the extension

Pino Please·

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

AdBlock 360

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating