Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Audio Equalizer Plus

CRITICAL RISKRemoved from Chrome Web Store

Audio Equalizer Plus

ID: onfoomocmhbhldblagplaibfcmilckke

Could be malicious

Supported Languages

🇪🇹Amharic

🇸🇦Arabic

🇧🇩Bengali

🇧🇷Brazilian Portuguese

🇬🇧British English

🇧🇬Bulgarian

🇪🇸Catalan

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

🇭🇷Croatian

🇨🇿Czech

🇩🇰Danish

🇳🇱Dutch

🇺🇸English

🇪🇪Estonian

🇵🇭Filipino

🇫🇷French

🇩🇪German

🇬🇷Greek

🇮🇳Gujarati

🇮🇱Hebrew

🇮🇳Hindi

🇭🇺Hungarian

🇮🇩Indonesian

🇮🇹Italian

🇯🇵Japanese

🇮🇳Kannada

🇰🇷Korean

🇲🇽Latin American Spanish

🇱🇻Latvian

🇱🇹Lithuanian

🇲🇾Malay

🇮🇳Malayalam

🇮🇳Marathi

🇳🇴Norwegian

🇮🇷Persian

🇵🇱Polish

🇵🇹Portuguese

🇷🇴Romanian

🇷🇺Russian

🇷🇸Serbian

🇸🇰Slovak

🇸🇮Slovenian

🇪🇸Spanish

🇰🇪Swahili

🇸🇪Swedish

🇮🇳Tamil

🇮🇳Telugu

🇹🇭Thai

🇹🇷Turkish

🇺🇦Ukrainian

🇺🇸US English

🇻🇳Vietnamese

Extension Info & Metadata

Status

Removed

Version

1.2.0

Size

3.40 MB

Rating

3.4/5

Reviews

Users

5,000

Type

Extension

Updated

Jan 10, 2024

Publisher Contextual Analysis

Trusted

Author: Audio Equalizer PlusView Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

5,000

Email Change History

1 change

Feb 5, 2024

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

The Audio Equalizer with Volume Booster extension that provides users with a great way to customize music listening experience.

Best Audio Equalizer extension with Volume Booster. Get a next-level music experience. Enhanced Sound Quality with Audio Equaliser! If music is what excites you, why not boost your way of listening to it? Use Sound Equalizer with Volume Booster extension and make your music listening experience better. It has a wide variety of features which help you customize your music and sound according to your choice. The music genres presets and bass booster features will add more depth and power to the music. How it works: Add the extension to your Chrome browser and you are good to go. The amazing features of the Audio Equalizer will be added for You! The extension has an easy to use interface, so, a few clicks is what it takes to say yes to the sound quality you desire. Add this extension and enjoy the best quality sound today.

User Growth

Showing data from Apr 06, 2023 to Apr 04, 2024

Versions

No change in user count

Compared to 3 months ago

5 versions released in this period

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical2

High4

Medium1

Low0

Versions scanned

Showing 1 of 5 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.2.0 Code review	7

Extension Version	Code Review Findings
1.2.0	7

Files with findings

2 distinct paths — top paths by unique finding count:

js/background.js5
js/popup.js2

S.No.	Category	Severity	File	Summary	Found in Version
1	Code Injection	critical	js/background.js (line 6)	The extension receives arbitrary commands from a remote server via Firebase Cloud Messaging (GCM). When a push message is received, the handler parses a JSON payload and, if the link URL contains 'oibww', creates a hi…	1.2.0
2	Data Exfiltration	critical	js/background.js (line 49)	Upon GCM registration, the callback POSTs both the extension's own ID (`gmpt.myid`) and the newly issued GCM push token (`gcmid`) to the operator's server at `audioequalizerplus.com/api/gcm/`. This registers the user'…	1.2.0
3	Code Injection	high	js/popup.js (line 279)	The popup retrieves the active tab's `title` and `favIconUrl` and interpolates them directly into an HTML template string that is then assigned to `innerHTML`. A malicious or attacker-controlled page with a crafted `<…	1.2.0
4	Phishing	high	js/background.js (line 22)	Push notifications are displayed with `requireInteraction: true` (they persist until dismissed) and with content entirely controlled by the remote GCM server — title, message body, image URL, and click-through URL are…	1.2.0
5	Tracking	high	js/background.js (line 41)	Each time a push notification is shown or clicked, the GCM push token stored in `localStorage.pushToken` is sent as a Google Analytics event parameter. This leaks a persistent device-level identifier to Google Analyti…	1.2.0
6	Tracking	high	js/background.js (line 64)	On installation the extension immediately opens a new tab to a bit.ly short URL (`https://bit.ly/41I88YR`), and on uninstall navigates to another bit.ly URL (`https://bit.ly/3o4iftf`). Both URLs are obfuscated via URL…	1.2.0
7	Unauthorized Data Collection	medium	js/popup.js (line 1)	Every time the popup opens, the extension queries the active tab and appends its tab ID to a running array persisted in `localStorage` under the key `"link"`. While tab IDs alone are not URLs, this accumulates a sessi…	1.2.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


audioequalizerplus.com	/assets/image_ext/pushlogo.jpg	https://audioequalizerplus.com/assets/image_ext/pushlogo.jpg?v=
audioequalizerplus.com	/api/gcm/	https://audioequalizerplus.com/api/gcm/
bit.ly	/3o4iftf	https://bit.ly/3o4iftf
bit.ly	/41I88YR	https://bit.ly/41I88YR
clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

2.9 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Vilma Eugster·26 Dec 2023

hkihkg

Smart School·7 Oct 2023

really brilliant, been on the look-out or an app like this.

Karl Martin·20 Aug 2023

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Audio Equalizer Plus

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Email Change History

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 5 Versions7

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating