Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Adtrooper adblocker

CRITICAL RISKRemoved from Chrome Web Store

Adtrooper adblocker

ID: jfodjognacnlkmablgppannmpcoiganc

Could be malicious

Supported Languages

🇧🇩Bengali

🇧🇷Brazilian Portuguese

🇬🇧British English

🇧🇬Bulgarian

🇪🇸Catalan

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

🇭🇷Croatian

🇨🇿Czech

🇩🇰Danish

🇳🇱Dutch

🇺🇸English

🇪🇪Estonian

🇵🇭Filipino

🇫🇮Finnish

🇫🇷French

🇩🇪German

🇬🇷Greek

🇮🇳Gujarati

🇮🇳Hindi

🇭🇺Hungarian

🇮🇩Indonesian

🇮🇹Italian

🇯🇵Japanese

🇰🇷Korean

🇱🇻Latvian

🇱🇹Lithuanian

🇲🇾Malay

🇮🇳Malayalam

🇮🇳Marathi

🇳🇴Norwegian

🇵🇱Polish

🇵🇹Portuguese

🇷🇴Romanian

🇷🇺Russian

🇷🇸Serbian

🇸🇰Slovak

🇸🇮Slovenian

🇪🇸Spanish

🇸🇪Swedish

🇮🇳Tamil

🇮🇳Telugu

🇹🇭Thai

🇹🇷Turkish

🇺🇸US English

🇻🇳Vietnamese

Extension Info & Metadata

Status

Removed

Version

0.22

Size

0.41 MB

Rating

3.0/5

Reviews

Users

232,953

Type

Extension

Updated

May 25, 2021

Publisher Contextual Analysis

Author: Yvan LandryView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

232,953

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Adtrooper fights ads and protects your browsing experience

Adtrooper is an adblocker software. We fight on your side, preventing ad companies from hurting your browsing experience. Features: ✰ Automatically set up ad blocking rules by your geography ✰ Doesn’t slow down web pages loading speed ✰ No such thing as “Acceptable Ads” ✰ Whitelist - if you want to support a specific website or it doesn’t work

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical2

High2

Medium4

Low1

Versions scanned

Showing 2 of 2 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
0.22 Code review	4
0.20 Code review	5

Extension Version	Code Review Findings
0.22	4
0.20	5

Files with findings

5 distinct paths — top paths by unique finding count:

ext/background.js4
popup.html2
ext/content.js1
manifest.json1
subscriptions.xml1

S.No.	Category	Severity	File	Summary	Found in Version
1	Remote Code Loading	critical	subscriptions.xml (line 1)	All 23 filter list subscriptions — including EasyList, EasyPrivacy, and language-specific lists — have been redirected from their official sources (e.g., easylist.to, adblockplus.org) to an operator-controlled domain …	0.20
2	Remote Code Loading	critical	ext/background.js (line 9)	The extension polls `https://cdn.easyadblocker.com/notification.json` — a domain controlled entirely by the extension author — for push notifications. This notification system can display arbitrary messages to users' …	0.20
3	Tracking	high	manifest.json (line 1)	The extension's Content Security Policy explicitly whitelists `https://www.google-analytics.com` and `https://www.googletagmanager.com` as permitted script sources — allowing scripts from these tracking domains to exe…	0.20
4	Unauthorized Data Collection	high	ext/background.js (line 9)	The extension fetches 'exception rules' (allowlist/whitelist) and anti-adblock circumvention filters from the operator-controlled `rules.easyadblocker.com` domain. Exception rules define which ads are permitted to sho…	0.20
5	Code Injection	medium	ext/content.js (line 841)	This content script injects and executes code inside page/frame contexts via `eval`, crossing the normal boundary between extension code and web page code. Even if intended for filtering or anti-circumvention logic, t…	0.22
6	Network Interception	medium	ext/background.js (line 7802)	The extension hard-codes multiple remote endpoints on third-party domains for exception rules, anti-adblock rules, and notification payloads. Because this extension has `webRequest` and `webRequestBlocking` privileges…	0.22
7	Tracking	medium	ext/background.js (line 83)	The privileged background page loads Google Analytics remotely and immediately sends a tracking hit. In a background context with broad request visibility, this creates a telemetry path to a third party that is unrela…	0.22
8	Tracking	medium	popup.html (line 1)	The extension popup loads a stylesheet from an external CDN (`cdnjs.cloudflare.com`) rather than bundling the resource locally. External resource loading in extension pages creates a dependency on a third-party server…	0.20
9	Remote Code Loading	low	popup.html (line 1)	The extension popup depends on a remotely hosted stylesheet from `cdnjs.cloudflare.com` instead of packaging all UI assets locally. Remote resources in extension pages are risky because they let an external party infl…	0.22

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


getbootstrap.com	-	https://getbootstrap.com/
github.com	/twbs/bootstrap/blob/master/LICENSE	https://github.com/twbs/bootstrap/blob/master/LICENSE
www.w3.org	/2000/svg	http://www.w3.org/2000/svg
www.google-analytics.com	/analytics.js	https://www.google-analytics.com/analytics.js
*	/*	http:///
*	/*	https:///
chrome.google.com	/webstore/	https://chrome.google.com/webstore/
adblockplus.org	/getSubscription	https://adblockplus.org/getSubscription?version=%VERSION%&url=%SUBSCRIPTION%&downloadURL=%URL%&error=%ERROR%&channelStatus=%CHANNELSTATUS%&responseStatus=%RESPONSESTATUS%
openmarketings.com	/exceptionlist/$%7Bchrome.runtime.id%7D/exceptionrules.txt%60,defaults.subscriptions_exceptionsurl_privacy=	https://openmarketings.com/exceptionlist/${chrome.runtime.id}/exceptionrules.txt`,defaults.subscriptions_exceptionsurl_privacy=
rules.easyadblocker.com	/exceptionrules-privacy-friendly.txt	https://rules.easyadblocker.com/exceptionrules-privacy-friendly.txt

Showing 1 to 10 of 60 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

3.7 out of 5 · 3 most recent reviews

Text reviews

Positive

Negative

Nice! it works!

Luis Diaz·9 Jun 2021

Si funciona, en todos los sitios, me parece excelente

Manuel Arita·2 Jun 2021

Pop-up reklamlarını engelleyemiyor. Sana 1 Yıldız Bile Fazla Sıfır Yıldız Olsa Verirdim ama Yok O yüzden sildim Bir Dahada Yüklemeyeceğim Hiç kimseye Tavsiye etmiyorum.

Engin Rençber·2 Jun 2021

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Adtrooper adblocker

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 2 Versions9

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating