Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Browse Boost

CRITICAL RISKRemoved from Chrome Web Store

Browse Boost

ID: fmjhlgcmphfeflkfafplihigochjclko

Could be malicious

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Removed

Version

2.0

Size

0.02 MB

Rating

5.0/5

Reviews

Users

8,000

Type

Extension

Updated

May 10, 2023

Publisher Contextual Analysis

Author: https://browse-boost.comView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

8,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Get relevant results, even on error-prone sites. Browse Boost offers an alternate search option for a seamless browsing experience.

Browse Boost is a cutting-edge browser extension designed to enhance your browsing experience. With powerful search capabilities and seamless navigation, Browse Boost helps you find what you're looking for quickly and easily. When you land on a website that serves a 500 error, Browse Boost provides an alternate search option powered by Yahoo search, giving you access to a vast array of relevant results. This helps you overcome frustrating website errors and quickly find the information you need. But Browse Boost doesn't stop there. Our extension also provides real-time suggestions as you type in the search bar, offering helpful prompts and auto-complete options to speed up your search process. Plus, with built-in pop-up blocking and ad filtering, you can enjoy a cleaner, less cluttered browsing experience. So if you're tired of slow, error-prone browsing and want to take your online experience to the next level, try Browse Boost today! With our powerful search capabilities, seamless navigation, and Yahoo-powered search engine, you're sure to find what you're looking for in no time.

User Growth

Showing data from May 11, 2023 to May 09, 2024

Versions

-11.11%(-1,000 users)

Compared to 3 months ago

1 version released in this period

Rating Count

Total: 1 ratings

Average Rating

Current: 5.00 / 5.0+5.00

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical2

High3

Medium2

Low0

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
2.0 Code review	7

Extension Version	Code Review Findings
2.0	7

Files with findings

2 distinct paths — top paths by unique finding count:

worker.js6
performance.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Network Interception	critical	worker.js (line 983)	On ANY 4xx or 5xx HTTP response on ANY site, the extension closes the user's current tab (browser.tabs.remove) and opens errors.net with the full original URL, status code, and tracking UUID as query parameters. This …	2.0
2	Remote Code Loading	critical	worker.js (line 931)	After uploading per-page telemetry, the response from errors.net is used to open arbitrary tabs (browser.tabs.create(e.notice)) or windows (browser.windows.create(e.alert)) with attacker-controlled URL/properties. Thi…	2.0
3	Data Exfiltration	high	worker.js (line 921)	Every page load on every site (content_scripts matches ':///*') triggers a POST to errors.net containing the user's persistent UUID, full Navigation Timing data, and screen/window 'dimensions' (screenTop/screenLeft,…	2.0
4	Network Interception	high	worker.js (line 966)	On any DNS resolution failure, the user's tab is silently redirected to errors.net carrying the failed URL and the persistent UUID. This intercepts the browser's native NXDOMAIN flow to substitute a third-party 'alter…	2.0
5	Tracking	high	worker.js (line 915)	On install, the extension generates a persistent random UUID and stores it in browser.storage.sync (so it follows the user across devices/profiles signed into the same Chrome account). This UUID is attached to every p…	2.0
6	Other	medium	worker.js (line 19)	The API key is left as the literal placeholder string 'Replace with 40 character code'. This is then sent as a query parameter to errors.net on every beacon, error redirect, and DNS-failure redirect (e.g. lines 922, 9…	2.0
7	Unauthorized Data Collection	medium	performance.js (line 940)	The injected content script (which runs on every page on every site) collects screenTop, screenLeft, outerHeight/Width, and innerHeight/Width on top of full Navigation Timing data and forwards it to the background wor…	2.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


github.com	/mozilla/webextension-polyfill	https://github.com/mozilla/webextension-polyfill
mozilla.org	/MPL/2.0/	http://mozilla.org/MPL/2.0/.
fonts.googleapis.com	/css	https://fonts.googleapis.com/css?family=Roboto:400,500,700
errors.net	-	https://errors.net/
tldrlegal.com	/license/mit-license	https://tldrlegal.com/license/mit-license
mozilla.org	/MPL/2.0/	http://mozilla.org/MPL/2.0/
errors.net	-	https://errors.net
errors.net	/performance/	https://errors.net/performance/?license=
*	/*	http:///
*	/*	https:///

Showing 1 to 10 of 20 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

5.0 out of 5 · 1 most recent review

Text reviews

Positive

Negative

i love your app so much

Yogesh Gore·3 Jun 2023

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Browse Boost

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 1 Version7

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating