Chrome Web StoreDo not install
Code review: critical
Our reviewer read this extension’s code and confirmed malicious behaviour. 4 security findings documented below. Do not install it. Remove it if you already have it.
2 critical findings in this extension’s code
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
Free Keylogger Tool - Child Monitor Tackker, used by 30,000 people, is rated malicious by Extension Auditor. Our code review reported 4 findings (2 critical, 1 high, 1 medium), led by credential theft. Its permissions mean it can read and change data on all websites.
Key findings
- Critical
Credential Theft
The dontLog array explicitly excludes several non-sensitive input types but does NOT exclude type='password'. This means password fields on every banking site, email provider, and social network visited by the victim are captured on focusout and Enter keypress and written to local storage before being exfiltrated. The code runs as a content script matching <all_urls>, so no site is exempt.
- Critical
Data Exfiltration
Every 5 minutes (via chrome.alarms), the background service worker POSTs all accumulated keystroke logs (logHistory, which includes captured input values, timestamps, and origin URLs) together with the full browsing history (urlHistory, which includes device fingerprint fields) to [domain withheld]. After a successful response the local store is wiped, removing local forensic evidence. This is a complete exfiltration pipeline covering credential data captured on the victim's device.
- High
Unauthorized Data Collection
Every page navigation records the full URL, referrer, navigation method, user agent string, OS name, browser name and version, device model, and accept-language header, then stores this record in urlHistory for later exfiltration. This goes beyond the 'Web history' disclosure by attaching a persistent device fingerprint to every record, enabling the remote operator to de-anonymize the victim and correlate activity across sessions regardless of IP changes.
- Medium
Other
Commented-out code shows a prior version of the extension opened [domain withheld] (an obfuscated short-link to an unrelated external domain) once per day via a 50-second polling interval. This pattern — injection hidden in a monitoring tool — is consistent with the [domain withheld] spamware campaign IoC and indicates the extension has been used to deliver unwanted navigations in addition to keylogging. The code is disabled in this build but is present in the source, indicating the capability was intentional.
Analyst notes
This extension is a functional that covertly captures all input field values — including password fields (type='password' is not excluded from the dontLog list in:16) — across every website the victim visits, and exfiltrates the full payload (keystrokes + detailed browsing history with device fingerprinting) to [domain withheld] every 5 minutes via a background alarm (:89,137-143). The disclosure cross-check partially applies — the destination is the publisher's own domain and 'Web activity' is disclosed — but password field capture is not meaningfully covered by a 'user activity' disclosure, and the extension's own CWS description instructs the installer to 'install tackker on target system browser(s)', confirming it is designed for covert deployment against a non-consenting victim. Both the third-party risk signal and our internal IoC database (eSentire advisory 2025-01-08, [domain withheld] spamware campaign) independently corroborate this verdict.
Free Keylogger Tool - Child Monitor Tackker Chrome extension security report
ID: ekpkdmohpdnebfedjjfklhpefgpgaaji
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- https://tackker.com
- Privacy
- Privacy Policy
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- No
- Mailbox exists
- Yes
- Website
- Visit
Screenshots & videos
Install growth
- 2 critical
- 1 high
- 1 medium
The file, code excerpt and explanation behind each finding are part of the full report. No conclusion has been withheld — only the evidence. The verdict above already reflects everything found here.
2 critical findings in this extension’s code
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
Tackker is a free keylogger tool that helps you in Child Monitoring and other ethical monitoring services.
Read the publisher’s full description
tackker is online keylogger tool that helps you log the keystrokes and other user data. It can be used for child monitoring as well as employee monitoring. And Now You can also monitor your browsing history. Install Tackker and get peace of mind ;) tackker have made browser activity monitoring so easy. Monitor any browser activity by following these simple steps: 1) Install tackker on target system browser(s). 2) After installation, you will be directed to register/login (this part is important since without registering you can not see the logged data). 3) Once you are registered and the plugin is installed , simply monitor user activity from our online dashboard.
User reviews
Extension files
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
2 critical findings in this extension’s code
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
Gain full insight into all external connections.
Upgrade for full visibility.
Related extensions
Popular in make_chrome_yours/accessibility
- Read&Write for Google Chrome™20,000,000 users
- VPN-free.pro - Free Unlimited VPN9,000,000 users
- Honorlock5,000,000 users
- Night Theme - Dark Mode4,000,000 users
- Snap&Read3,000,000 users
Store rankings
Where this extension appears in store category, collection and keyword rankings.