Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Customer Portal Chrome Extension

CRITICAL RISKRemoved from Chrome Web Store

Customer Portal Chrome Extension

ID: ibdkbajcljnpfeaappbpflbhccgdmdfi

Could be malicious

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Removed

Version

3.6.0

Size

0.55 MB

Rating

4.9/5

Reviews

Users

10,000

Type

Extension

Updated

Dec 4, 2024

Publisher Contextual Analysis

Author: Total access communication Public Company LimitedView Profile
Privacy: Privacy Policy
Help: Help Center
Country: thailand
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Address: Phayathai Road bangkok 10330 thailand

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

10,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Customer Portal Chrome Extension.

Customer Portal Chrome extension enhances capabilities of dtac Customer Portal web, which is the application for dtac agents to provide customer service support, with the following benefits. 1. Enable agents to easily get customer information via integration with peripheral equipment, which are Card reader, Passport scanner and Signature pad. 2. Enable agents to easily capture screenshot and automatically create incident ticket. 3. Facilitate agents to smoothly connect with Softphone and Queue systems.

User Growth

Showing data from Jan 01, 2022 to Jan 05, 2023

Versions

+11.11%(+1,000 users)

Compared to 4 months ago

3 versions released in this period

Rating Count

Total: 9 ratings

Average Rating

Current: 4.89 / 5.0+0.01

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High3

Medium3

Low0

Versions scanned

Showing 1 of 5 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
3.5.2 Code review	6

Extension Version	Code Review Findings
3.5.2	6

Files with findings

4 distinct paths — top paths by unique finding count:

js/background.js3
js/common/chrome.factory.js1
js/mail/mail.controller.js1
js/page_info.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Credential Theft	high	js/page_info.js (line 1)	The content script harvests authentication-bearing items (`ls.userProfile` containing `ccbToken` and email, `ls.customerLocalStorage` containing CustomerNumber/SubscriberNumber, `ls.latestLoginUser`) plus the current …	3.5.2
2	Data Exfiltration	high	js/mail/mail.controller.js (line 140)	The destination API host for the outgoing mail/screenshot upload is taken verbatim from `page.apiHOST` (sourced from the page's own `ls.apiHOST` localStorage key), and the request includes the user's `ccbToken` as a B…	3.5.2
3	Privilege Escalation	high	js/background.js (line 239)	The background service worker exposes an externally_connectable bridge that forwards arbitrary messages from web pages (including http://localhost:3333 and http://localhost:4200 per the manifest) directly into a nativ…	3.5.2
4	Phishing	medium	js/background.js (line 187)	`OpenChromeNewWindow` takes an attacker-controllable `message.action` string from `onConnectExternal`, splits it, and uses `cmds[1]` directly as the URL passed to `chrome.windows.create`. A page on any externally_conn…	3.5.2
5	Privilege Escalation	medium	js/background.js (line 76)	Hard-coded trigger that fires a native-messaging command `OPENIES,...` whenever the user navigates to `http://fornax7:7007/CCWeb/login.html`. The native helper is instructed to launch Internet Explorer (an unsupported…	3.5.2
6	Unauthorized Data Collection	medium	js/common/chrome.factory.js (line 45)	`getCurrentTabCapture` calls `chrome.tabs.captureVisibleTab` to take a PNG screenshot of the active tab, which is then base64-attached to the outbound POST in `mail.controller.js`. With `<all_urls>` host permissions a…	3.5.2

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


getbootstrap.com	-	http://getbootstrap.com
github.com	/twbs/bootstrap/blob/master/LICENSE	https://github.com/twbs/bootstrap/blob/master/LICENSE
github.com	/h5bp/html5-boilerplate/blob/master/src/css/main.css	https://github.com/h5bp/html5-boilerplate/blob/master/src/css/main.css
github.com	/twbs/bootstrap/issues/11245/n	https://github.com/twbs/bootstrap/issues/11245\n
github.com	/twbs/bootstrap/issues/10106/n//	https://github.com/twbs/bootstrap/issues/10106\n//
getbootstrap.com	/getting-started/	http://getbootstrap.com/getting-started/#third-box-sizing\n*
a11yproject.com	/posts/how-to-hide-content//n/n.sr-only	http://a11yproject.com/posts/how-to-hide-content/\n\n.sr-only
www.w3.org	/TR/2013/NOTE-WCAG20-TECHS-20130905/G1/n//	http://www.w3.org/TR/2013/NOTE-WCAG20-TECHS-20130905/G1\n//
developer.mozilla.org	/en-US/docs/Web/Events/click	https://developer.mozilla.org/en-US/docs/Web/Events/click#Safari_Mobile\n//
github.com	/necolas/normalize.css/pull/379	https://github.com/necolas/normalize.css/pull/379

Showing 1 to 10 of 70 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

5.0 out of 5 · 1 most recent review

Text reviews

Positive

Negative

good

sureeporn rachanirom·23 Oct 2016

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Customer Portal Chrome Extension

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 5 Versions6

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating