Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Ghost - Anonymous Stories for Instagram

CRITICAL RISKRemoved from Chrome Web Store

Ghost - Anonymous Stories for Instagram

ID: cdpeckclhmpcancbdihdfnfcncafaicp

Could be malicious

Supported Languages

🇸🇦Arabic

🇧🇩Bengali

🇧🇬Bulgarian

🇪🇸Catalan

🇨🇳Chinese (Simplified)

🇭🇷Croatian

🇨🇿Czech

🇩🇰Danish

🇳🇱Dutch

🇺🇸English

🇪🇪Estonian

🇵🇭Filipino

🇫🇮Finnish

🇫🇷French

🇩🇪German

🇬🇷Greek

🇮🇳Gujarati

🇮🇱Hebrew

🇮🇳Hindi

🇭🇺Hungarian

🇮🇩Indonesian

🇮🇹Italian

🇯🇵Japanese

🇰🇷Korean

🇱🇻Latvian

🇱🇹Lithuanian

🇲🇾Malay

🇮🇳Malayalam

🇮🇳Marathi

🇳🇴Norwegian

🇵🇱Polish

🇵🇹Portuguese

🇷🇴Romanian

🇷🇺Russian

🇷🇸Serbian

🇸🇰Slovak

🇸🇮Slovenian

🇪🇸Spanish

🇰🇪Swahili

🇸🇪Swedish

🇮🇳Tamil

🇮🇳Telugu

🇹🇭Thai

🇹🇷Turkish

🇺🇦Ukrainian

🇻🇳Vietnamese

Extension Info & Metadata

Status

Removed

Version

1.1.8

Size

0.15 MB

Rating

4.6/5

Reviews

175

Users

20,000

Type

Extension

Updated

Dec 20, 2024

Publisher Contextual Analysis

Trusted

Author: GoodApp'sView Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

20,045

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Instagram Stories Downloader and Viewer. Saves photo or video Stories from Insta. View Instagram Stories anonymously and privately

Download and View Instagram Stories anonymously and privately. Save any Image or Video from Instagram Stories. Ghost - Anonymous Stories for Instagram keeps your privacy protected. Use our extension to View or Download Stories in Stealth Mode. This is a very simple and reliable extension, add it to your Chrome and it will do the rest. Features: - Downloads any Story from Instagram. Supports Download of Photos and Videos from Instagram Stories; - Absolutely anonymous viewing Stories of any users you subscribed to and on all public accounts; - Switching between users within our Instagram Viewer and Downloader; - Preview of Stories of neighbouring users from your feed; - Marking viewed IG Stories to remember those you have already seen; - Stories feed in the same order as in Instagram which recommends you most interesting users; - Immediate switching between anonymous and normal mode without reloading the page User guide: How to download a Story from Instagram (both Video or Photo): • Go to Story you would like to download and click on Download Story button. The Ghost will save the story to your computer immediately. Supports both photo and video Stories How to View any Instagram Story Anonymously (Spy Mode for Instagram): • Click on pop-up icon in Instagram page and you will see a selector, switch it ON if you would like to see Stories anonymously • Switch it OFF when you don't need to stay private anymore. Color of the Stories changes depending on what mode is ON. It will help you to stay informed every time Note: In order to activate Ghost - Anonymous Stories for Instagram after installation please reload your Instagram page

User Growth

Showing data from Dec 03, 2022 to Dec 02, 2023

Versions

No change in user count

Compared to 3 months ago

8 versions released in this period

Rating Count

Total: 22 ratings

Average Rating

Current: 4.09 / 5.0+4.09

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High3

Medium1

Low2

Versions scanned

Showing 1 of 19 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.0.3 Code review	6

Extension Version	Code Review Findings
1.0.3	6

Files with findings

2 distinct paths — top paths by unique finding count:

js/bg.js4
js/app.js2

S.No.	Category	Severity	File	Summary	Found in Version
1	Credential Theft	high	js/bg.js (line 1)	The background service worker uses chrome.webRequest with the 'extraHeaders' option to read and persistently store Instagram session authentication headers (x-ig-www-claim, x-ig-app-id) sent by the user's browser. The…	1.0.3
2	Network Interception	high	js/bg.js (line 16)	Replays the captured x-ig-www-claim and x-ig-app-id session tokens against Instagram's private mobile API endpoint (i.instagram.com/api/v1/feed/user/.../story/) to retrieve story content as the logged-in user without …	1.0.3
3	Unauthorized Data Collection	high	js/bg.js (line 43)	Same pattern reused to call the private reels_tray endpoint with the stolen session headers, enumerating the full list of users whose stories the victim follows. Demonstrates systematic abuse of intercepted credential…	1.0.3
4	Network Interception	medium	js/app.js (line 351)	Overlays invisible/transparent absolutely-positioned divs at z-index 10 across every story tray item to intercept (clickjack) the user's clicks on Instagram's own UI and reroute them through the extension's own fetche…	1.0.3
5	Other	low	js/app.js (line 413)	Injects a global CSS rule at document_start that hides every <canvas> element on instagram.com using !important. This is used to suppress Instagram's story-ring rendering so the extension can substitute its own UI; br…	1.0.3
6	Other	low	js/bg.js (line 63)	Builds Instagram profile-lookup URLs by string-concatenating an attacker-controllable userName field into the query path with no validation or encoding, then fetches with the stolen auth headers. While exploited input…	1.0.3

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


www.w3.org	/2000/svg	http://www.w3.org/2000/svg
www.w3.org	/1999/xlink	http://www.w3.org/1999/xlink
statistic.shceduleuser.com	/ghost-user.json	https://statistic.shceduleuser.com/ghost-user.json
chromewebstore.google.com	/detail/	https://chromewebstore.google.com/detail/
www.instagram.com	-	https://www.instagram.com/
i.instagram.com	/api/v1/feed/user/	https://i.instagram.com/api/v1/feed/user/
i.instagram.com	/api/v1/feed/reels_tray/	https://i.instagram.com/api/v1/feed/reels_tray/
i.instagram.com	/api/v1/users/web_profile_info/	https://i.instagram.com/api/v1/users/web_profile_info/?username=
www.instagram.com	/*	https://www.instagram.com/*
uninstaller.ghost-viewer.com	-	https://uninstaller.ghost-viewer.com/?${new

Showing 1 to 10 of 30 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

4.2 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

a very helpfull tool for some people

bd S H O R T 444·24 Jan 2025

下載影片好方便(流淚

I-Ching Shih·15 Jan 2025

Works great but there are times when it does not work well.

Peej Urtica (Peej)·11 Jan 2025

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Ghost - Anonymous Stories for Instagram

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 19 Versions6

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating