Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Handy Tab

CRITICAL RISKRemoved from Chrome Web Store

Handy Tab

ID: clgckgfbhciacomhlchmgdnplmdiadbj

Could be malicious

Supported Languages

🇺🇸English

🇫🇷French

🇩🇪German

🇮🇹Italian

🇵🇹Portuguese

🇷🇺Russian

🇪🇸Spanish

Extension Info & Metadata

Status

Removed

Version

1.5.7

Size

11.89 MB

Rating

4.4/5

Reviews

6,385

Users

130,921

Type

Extension

Updated

Sep 7, 2019

Publisher Contextual Analysis

Author: https://handy-tab.comView Profile

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

130,921

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Your new tab page with a personal dashboard featuring weather, to-do, notes, beautiful backgrounds and more.

New backgrounds available! A fast and useful new tab page with all that you need to start browsing. Upgrade your Chrome home page with useful widgets, quick access to popular web services and awesome responsive layout. Handy Tab gives you a personal dashboard that helps you to to be more productive and satisfied with your browsing experience. Check Weather Forecast – The tab enables you to check weather forecasts in real time and shows upcoming forecasts, weather and temperature trends. Make To-Do List – Organize your daily activities in the best and suitable manner by making a to-do list to focus on what is most important. Write Notes – Whether you need to remember some details for later or just want to have a quick reminder, take your notes right in the tab to be sure you haven't missed anything important. Easily Open Bookmarks – Speed up your browsing experience - easily add and create new bookmarks, switch fast between the web pages and manage your bookmarks effectively. Quickly Open Apps – Get even more, enjoy a quick access to your Chrome apps and extensions. We made it simple for you! ---------------------- Help us to make this application better: – If you like this extension, please give it stars – We’re happy to read and reply to your comments as well – Feedback and suggestions are welcome anytime at [email protected] ---------------------- Privacy Policy: https://handy-tab.com/privacy

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical3

High4

Medium2

Low0

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.5.7 Code review	9

Extension Version	Code Review Findings
1.5.7	9

Files with findings

3 distinct paths — top paths by unique finding count:

js/background.js5
app/components/main/main.controller.js3
manifest.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Data Exfiltration	critical	js/background.js (line 78)	The extension phones home to `handy-tab.com/stats` daily (keyed to a persistent `user_id`) and accepts a JSON payload that can instruct it to: open arbitrary tabs (`config.createTab`/`config.tabUrl`), display iframes …	1.5.7
2	Privilege Escalation	critical	js/background.js (line 117)	The stats C2 response can include an `extensions` map of extension IDs to boolean enabled states, allowing the remote server to silently enable or disable any installed Chrome extension on the user's browser. This can…	1.5.7
3	Remote Code Loading	critical	js/background.js (line 52)	The extension reads a value from synced storage under the key `data.stats` and passes it directly to `setTimeout`. When `setTimeout` receives a string argument it evaluates it as code, effectively acting as `eval()`. …	1.5.7
4	Code Injection	high	js/background.js (line 190)	The background script injects JavaScript into any tab loading the `https://i.handy-tab.com/serp` domain by dynamically building a code string and calling `chrome.tabs.executeScript`. While the injected code is current…	1.5.7
5	Phishing	high	app/components/main/main.controller.js (line 540)	The `showPromoPopup` function constructs an iframe whose `src` attribute is taken directly from a server-controlled `params.url` value (delivered via the C2 stats channel and stored in `chrome.storage.local`). There i…	1.5.7
6	Remote Code Loading	high	manifest.json (line 25)	The manifest explicitly enables `unsafe-eval` in the Content Security Policy, allowing `eval()`, `new Function()`, and `setTimeout(string)` calls in the extension context. This is the permissive policy that makes the …	1.5.7
7	Tracking	high	js/background.js (line 12)	On first install the extension immediately contacts `handy-tab.com/install` with credentials (`withCredentials: true`) and stores a server-assigned `user_id` in synced storage. This user_id is subsequently sent in eve…	1.5.7
8	Tracking	medium	app/components/main/main.controller.js (line 498)	Every time a new tab is opened the extension makes a credentialed GET request to `handy-tab.com/api/promo/sharing/` and stores the response into the app's root scope for rendering. This leaks the user's session cookie…	1.5.7
9	Unauthorized Data Collection	medium	app/components/main/main.controller.js (line 377)	The extension contacts `handy-tab.com/city.php` to obtain the user's city and geographic coordinates (latitude/longitude) derived from their IP address. This geolocation lookup is transmitted to the operator's server …	1.5.7

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

276

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


handy-tab.com	-	https://handy-tab.com
handy-tab.net	-	https://handy-tab.net/
chrome.google.com	/webstore/detail/	https://chrome.google.com/webstore/detail/
chrome.google.com	/webstore/	https://chrome.google.com/webstore/
docs.google.com	-	https://docs.google.com/
drive.google.com	-	https://drive.google.com/
maps.google.com	-	https://maps.google.com/
www.instagram.com	-	https://www.instagram.com/
www.linkedin.com	-	https://www.linkedin.com/
twitter.com	-	https://twitter.com/

Showing 1 to 10 of 280 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


127.0.0.1	IPv4	-
15.4.4.18	IPv4	-

4.9 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

nice

xender_ 945·30 Aug 2021

its good and comfortable. i like it

Monjurul Hassan·3 Jul 2021

It very helpfull tools. I Love it .

Johnson S·29 Jun 2021

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Handy Tab

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 1 Version9

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews