Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: ICPBravo Access

CRITICAL RISKRemoved from Chrome Web Store

ICPBravo Access

ID: plmndhfiofdlcgahoinehedbincopilm

Could be malicious

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Removed

Version

1.0

Size

0.32 MB

Rating

3.5/5

Reviews

Users

300,000

Type

Extension

Updated

Apr 25, 2019

Publisher Contextual Analysis

Trusted

Author: http://icpbravoaccess.com.brView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

300,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

ICPBravo Access ICPBrasil and General PKI Extension.

ICP Bravo Access é uma solução da Scytl para acessar os mais variados certificados digitais, tanto os certificados protegidos por softwares instalados na máquina do cliente, quanto os armazenados fisicamente em tokens e cartões. Nossa solução fornece suporte a todos os certificados da ICP Brasil e implementa as mais avançadas técnicas de segurança e criptografia.

User Growth

Showing data from Jan 01, 2022 to Jun 11, 2022

Versions

No change in user count

Compared to 3 months ago

1 version released in this period

Rating Count

Total: 82 ratings

Average Rating

Current: 3.46 / 5.0

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical2

High3

Medium1

Low1

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.0 Code review	7

Extension Version	Code Review Findings
1.0	7

Files with findings

6 distinct paths — top paths by unique finding count:

scripts/libs/icpbravo.access.ext.js2
popup.html1
scripts/certificate_info.js1
scripts/content_script.js1
scripts/event_page.js1
scripts/event_page.min.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Data Exfiltration	critical	scripts/libs/icpbravo.access.ext.js (line 808)	The `tryExport` action sends a certificate thumbprint to the native application and returns the result to the requesting web page. Combined with the unrestricted content script bridge, any webpage can initiate a certi…	1.0
2	Privilege Escalation	critical	scripts/content_script.js (line 33)	The content script runs on ALL pages (http:/// and https:///) and listens for a custom DOM event (`com.scytl.icpbravoaccess.request`) dispatched by any script on the page. Any website can trigger this listener and…	1.0
3	Data Exfiltration	high	scripts/certificate_info.js (line 104)	The `exportCertificate` function retrieves full certificate binary data from the native application (base64-decoded via `atob`) and silently triggers a download via a programmatically-clicked hidden anchor element. Th…	1.0
4	Tracking	high	scripts/event_page.js (line 55)	The background script dynamically injects Google Analytics (ga.js) via a programmatically created script tag, then tracks every cryptographic operation (sign, encrypt, decrypt, certificate access) along with the origi…	1.0
5	Tracking	high	scripts/event_page.min.js (line 1)	The minified production background script (the file actually loaded by the manifest) confirms the GA tracking is active in the shipped version. It tracks the user's domain and native app version on every `check` comma…	1.0
6	Unauthorized Data Collection	medium	scripts/libs/icpbravo.access.ext.js (line 55)	The library collects a detailed browser and OS fingerprint (user agent, browser name and version, OS type and version, mobile flag, cookie state) at initialization time. This fingerprint data is included in the `brows…	1.0
7	Other	low	popup.html (line 94)	The popup HTML loads `content_script.js` — a script designed to run in the context of web pages as a messaging bridge. Including it in the popup context is architecturally irregular and means the popup page establishe…	1.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


github.com	/McNull/angular-block-ui	https://github.com/McNull/angular-block-ui
getbootstrap.com	-	http://getbootstrap.com
github.com	/twbs/bootstrap/blob/master/LICENSE	https://github.com/twbs/bootstrap/blob/master/LICENSE
github.com	/h5bp/html5-boilerplate/blob/master/src/css/main.css	https://github.com/h5bp/html5-boilerplate/blob/master/src/css/main.css
www.w3.org	/Graphics/SVG/1.1/DTD/svg11.dtd	http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd
www.w3.org	/2000/svg	http://www.w3.org/2000/svg
www.w3.org	/1999/02/22-rdf-syntax-ns	http://www.w3.org/1999/02/22-rdf-syntax-ns#
ns.adobe.com	/xap/1.0/	http://ns.adobe.com/xap/1.0/
ns.adobe.com	/xap/1.0/mm/	http://ns.adobe.com/xap/1.0/mm/
ns.adobe.com	/xap/1.0/sType/ResourceRef	http://ns.adobe.com/xap/1.0/sType/ResourceRef#

Showing 1 to 10 of 30 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

1.6 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Péssimo como os serviços dos crcs e cfc, só criam burocracia e dificuldade, n��o consigo assinar o decore

Marcelo Coelho·27 Jul 2021

Péssimo como os serviços dos crcs e cfc, só criam burocracia e dificuldade, não consigo assinar o decore

Marcelo Coelho·27 Jul 2021

Pessimo

Karajas Auto Center

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

ICPBravo Access

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 1 Version7

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating