Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: datatracking

CRITICAL RISKRemoved from Chrome Web Store

datatracking

ID: nibcfllinlndlgfjhhnhnfoapjlagcek

Could be malicious

Supported Languages

🇻🇳Vietnamese

Extension Info & Metadata

Status

Removed

Version

3.8.3

Size

0.17 MB

Rating

5.0/5

Reviews

Users

410

Type

Extension

Updated

Oct 25, 2022

Publisher Contextual Analysis

Trusted

Author: https://datatracking.vnView Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

410

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

datatracking

Ứng dụng datatracking giúp bạn nâng cao hiệu quả chốt sales và tư vấn bán hàng để tăng doanh thu gấp nhiều lần. Chúng tôi giúp bạn tránh lãng phí thời gian trên mạng xã hội bằng những tác vụ thủ công. datatracking sẽ phân tích dữ liệu của bạn, xử lý chúng và cung cấp các công cụ giúp bạn thao tác trên những dữ liệu đó. Mục tiêu của chúng tôi là giúp bạn tránh lãng phí vào những thời gian vô ích trên mạng xã hội, thay vào đó bạn sử dụng mạng xã hội hiệu quả hơn cho công việc của bạn.

User Growth

Showing data from Jan 01, 2022 to Dec 31, 2022

Versions

-10.48%(-48 users)

Compared to 3 months ago

5 versions released in this period

Rating Count

Total: 17 ratings

Average Rating

Current: 5.00 / 5.0

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High3

Medium3

Low0

Versions scanned

Showing 2 of 9 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
3.8.2 Code review	2
3.8.1 Code review	4

Extension Version	Code Review Findings
3.8.2	2
3.8.1	4

Files with findings

2 distinct paths — top paths by unique finding count:

inner.js5
manifest.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Data Exfiltration	high	inner.js (line 124)	This function iterates every `<script>` tag on the current Facebook page, extracts raw script text around 'direct_nav_result' markers (Facebook's internal graph-navigation metadata, which includes numeric-to-vanity UI…	3.8.1
2	Unauthorized Data Collection	high	inner.js (line 124)	This function iterates every `<script>` tag on Facebook pages, searches for `direct_nav_result` (an internal Facebook data marker), and bulk-POSTs raw script-tag content to `/v11/detectUid` without any user-triggered …	3.8.2
3	Unauthorized Data Collection	high	inner.js (line 93)	For every Facebook commenter the extension processes, it POSTs that commenter's numeric UID, display name, parent post ID, full comment text, and comment timestamp to apiv2.datatracking.vn/v11/getMsisdn. These are per…	3.8.1
4	Other	medium	inner.js (line 168)	On every Facebook page load the extension silently reads the `c_user` cookie (the user's numeric Facebook session ID) and immediately transmits it to the publisher's API to authenticate/register the user, opening the …	3.8.2
5	Other	medium	inner.js (line 115)	A plaintext hardcoded shared secret ('Dttk123$%^&789$@$') is embedded in client-side JavaScript and transmitted with every API request. Any user who extracts the extension ZIP can use this credential to make unauthent…	3.8.1
6	Other	medium	manifest.json (line 1)	The bundled manifest declares manifest_version 3, but the live CWS listing reports manifest_version 2. This discrepancy indicates the publisher deployed an updated extension bundle (MV3) that differs from what Google …	3.8.1

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


www.facebook.com	/profile.php	https://www.facebook.com/profile.php?id=100012267496714&
www.facebook.com	/sieunhan.ngay	https://www.facebook.com/sieunhan.ngay?comment_id=
www.facebook.com	-	https://www.facebook.com/
cms.datatracking.vn	/tracking/list/1	https://cms.datatracking.vn/tracking/list/1
localhost	/v11	http://localhost:8064/v11
apiv2.datatracking.vn	/v11	https://apiv2.datatracking.vn/v11
localhost	/v11	http://localhost:8080/v11
192.168.100.5	/v11	http://192.168.100.5:8080/v11
www.facebook.com	/groups/564732660923938/permalink/862220587841809/	https://www.facebook.com/groups/564732660923938/permalink/862220587841809/?__cft__[0
www.facebook.com	/permalink.php	https://www.facebook.com/permalink.php?story_fbid=943003029774030&id=100021930261128&__cft__[0

Showing 1 to 10 of 60 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


192.168.100.5	IPv4	-

5.0 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Mình không thể tìm được chỗ thanh toán, gia hạn hay mua các gói sử dụng ? giúp mình với

Manh Hoang·19 Dec 2019

Giải pháp thật tuyệt vời!

Linh Nguyễn·29 May 2019

Hehe lấy được tất cả các số điện thoại , cực kỳ hữu ích

Mạnh Hiệp Nguyễn Chí·28 May 2019

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

datatracking

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 9 Versions6

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating