Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: FlashTabs New Tab

CRITICAL RISKRemoved from Chrome Web Store

FlashTabs New Tab

ID: kffhlnegcacimfkjcooclbjpkkgipkhp

Could be malicious

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Removed

Version

1.0

Size

0.03 MB

Rating

0.0/5

Reviews

Users

46,144

Type

Extension

Updated

Apr 13, 2022

Publisher Contextual Analysis

Author: http://flashtabs.xyzView Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

46,144

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

FlashTabs New Tab

FlashTabs New Tab gives you quick access to the most popular websites. A minimalist replacement for Chrome's New Tab page. By clicking "Add to chrome", I accept and agree to installing 'FlashTabs' - Chrome™ extension and setting Chrome™ New Tab to that provided by the service, New Tab searches to Bing and the Terms of Use and Privacy Policy. The extension will update your new tab settings and will change your search to be powered by Bing. Terms of Use: https://www.flashtabs.xyz/term-of-use.html For other support or to provide feedback, please visit us at: https://www.flashtabs.xyz/contact.html Permissions used & reasons: Replace the page you see when opening a new tab - in order to provide the extension feature, your new tab settings would be modified. Read and change your data on all flashtabs.xyz sites - For our product to work, we require access to the websites we own and manage. Read your browser history - We have access only to our site, 'flashtabs.xyz', for our product to

User Growth

Showing data from Aug 16, 2023 to Oct 18, 2023

Versions

+2.92%(+1,307 users)

Compared to 2 months ago

1 version released in this period

Rating Count

Total: 0 ratings

Average Rating

Current: 0.00 / 5.0

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High3

Medium1

Low1

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.0 Code review	5

Extension Version	Code Review Findings
1.0	5

Files with findings

2 distinct paths — top paths by unique finding count:

browseraction_release.js4
pages/index.html1

S.No.	Category	Severity	File	Summary	Found in Version
1	Other	high	browseraction_release.js (line 113)	Actively closes the Chrome Web Store tab that shows the post-install confirmation (detected by the extension ID appearing in the URL). This hides the install context from the user and is a known deceptive pattern used…	1.0
2	Phishing	high	pages/index.html (line 1)	The New Tab override page immediately redirects via meta refresh to an external domain (flashtabs.xyz). This hijacks every new tab the user opens, forcing them to a monetized/affiliate destination instead of any usefu…	1.0
3	Tracking	high	browseraction_release.js (line 98)	On install, fires a tracking pixel to flashtabs.xyz/stats/nt/install and force-opens a promotional 'additional.html' page carrying the extension ID. It then inspects the current tab's URL for the extension ID and sile…	1.0
4	Tracking	medium	browseraction_release.js (line 74)	Hard-coded affiliate/partner tracking configuration with partid=flashtabsnt and the extension ID appended to install/uninstall URLs. These parameters are classic affiliate-revenue tracking beacons that identify the in…	1.0
5	Tracking	low	browseraction_release.js (line 129)	Sets an uninstall URL that pings flashtabs.xyz with the extension ID as a parameter, exfiltrating the uninstall event to the operator for attribution tracking. Not inherently malicious but part of the affiliate-tracki…	1.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


www.flashtabs.xyz	//install/additional.html	https://www.flashtabs.xyz//install/additional.html?partid=flashtabsnt&
www.flashtabs.xyz	//install/uninstall.html	https://www.flashtabs.xyz//install/uninstall.html?partid=flashtabsnt&
www.flashtabs.xyz	/stats/nt/install	https://www.flashtabs.xyz/stats/nt/install?partid=flashtabsnt
www.w3.org	/1999/02/22-rdf-syntax-ns	http://www.w3.org/1999/02/22-rdf-syntax-ns#
ns.attribution.com	/ads/1.0/	http://ns.attribution.com/ads/1.0/
purl.org	/dc/elements/1.1/	http://purl.org/dc/elements/1.1/
ns.adobe.com	/pdf/1.3/	http://ns.adobe.com/pdf/1.3/
ns.adobe.com	/xap/1.0/	http://ns.adobe.com/xap/1.0/
clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
www.flashtabs.xyz	-	https://www.flashtabs.xyz/

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

FlashTabs New Tab

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 1 Version5

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

Version History

Version-to-Version Code Diff

Extension Files

User Growth

Rating Count

Average Rating