Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: IG Follower Export tool

CRITICAL RISKRemoved from Chrome Web Store

IG Follower Export tool

ID: diobnppoomflbfopidklhnonklfpigng

Could be malicious

Supported Languages

🇧🇷Brazilian Portuguese

🇺🇸English

🇮🇹Italian

Extension Info & Metadata

Status

Removed

Version

1.9.0

Size

1.69 MB

Rating

3.6/5

Reviews

Users

115,647

Type

Extension

Updated

May 29, 2023

Publisher Contextual Analysis

Author: http://hypercavs.comView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: Yes
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

123,333

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

__MSG_chrome_extension_description__

🔍 Looking to export your Instagram followers and followings? Look no further! Introducing the IG Follower Export Tool, the ultimate extension trusted by over 100k users! 🚀📈 📥 With just a few clicks, you can export your followers and followings in Excel format, making it convenient for further analysis and management. Save time and effort with our powerful features: 📋 Key Features: 1️⃣ Export a list of followers from Instagram to CSV effortlessly. 2️⃣ Export a list of followings from Instagram to CSV quickly. 3️⃣ Extract users' profiles, including follower and following counts, biographies, public email addresses, and more. 4️⃣ Automatic progress saving allows you to pause and resume the extraction whenever you want. You can even switch to a different Instagram account while the extraction is paused. 💪✋ 🔒 Security Matters: Rest assured, the IG Follower Export Tool does not ask for your Instagram password, nor does it store or transmit any of your data, including your IG user information, visit history, posts, or social relationships. ⚠️ Important Note: While using the extension, it's important to be aware of the potential risks associated with Instagram deactivating or blocking your account. To mitigate these risks, we recommend using alternative accounts and controlling the frequency of use at your own discretion. Your account's safety is our top priority! 🛡️👀 🤝 Customer Support: For any assistance or queries, please reach out to our dedicated support team at [email protected]. We're here to help! 💎 Unlock Premium Benefits with IG Follower Export Tool PRO 💎 You can export the first 500 profiles of every extraction as a free trial. Upgrade to our PRO version for exclusive benefits! Experience the full potential of our extension and supercharge your Instagram data management! 🔥📈 Don't miss out on this powerful tool! Install the IG Follower Export Tool now and take control of your Instagram analytics today! 📈🔥

User Growth

Showing data from Jan 01, 2022 to Dec 31, 2022

Versions

+51.23%(+39,175 users)

Compared to 3 months ago

11 versions released in this period

Rating Count

Total: 59 ratings

Average Rating

Current: 3.56 / 5.0+0.16

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High2

Medium2

Low1

Versions scanned

Showing 1 of 26 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.8.0 Code review	5

Extension Version	Code Review Findings
1.8.0	5

Files with findings

3 distinct paths — top paths by unique finding count:

content.js2
popup/popup.js2
background.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Credential Theft	high	content.js (line 436)	The content script harvests the authenticated Instagram session artifact `www-claim-v2` from sessionStorage along with the viewer's username and profile picture URL, then forwards them over a runtime port to the popup…	1.8.0
2	Remote Code Loading	high	popup/popup.js (line 18972)	The popup calls `https://hypercavs.com/ig-follower-export-tool/check-token.php` and, from the JSON response, automatically executes `chrome.tabs.create({ url: o.open_link })` with whatever URL the server supplies. Thi…	1.8.0
3	Credential Theft	medium	popup/popup.js (line 18904)	The stolen `x_ig_www_claim` session header is propagated through a URL query parameter into the `dash.html` tab, where the actual follower/following scraping runs. Session-bound authentication material being shuttled …	1.8.0
4	Unauthorized Data Collection	medium	content.js (line 443)	The content script scrapes the signed-in Instagram user's identity by walking all inline `<script>` tags and parsing `window._sharedData`/`XIGSharedData` JSON blobs. Parsing private JSON state blobs out of the page's …	1.8.0
5	Tracking	low	background.js (line 51)	On install the extension unconditionally opens a tab to hypercavs.com with a channel-attribution query parameter. This is install-time tracking/attribution and combined with the later remote-controlled `open_link` mec…	1.8.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


hypercavs.com	/ig-follower-export-tool/	https://hypercavs.com/ig-follower-export-tool/
hypercavs.com	-	https://hypercavs.com/
github.com	/zloirock/core-js/blob/v3.29.1/LICENSE	https://github.com/zloirock/core-js/blob/v3.29.1/LICENSE
github.com	/zloirock/core-js	https://github.com/zloirock/core-js
cdn.materialdesignicons.com	/5.4.55/css/materialdesignicons.min.css	https://cdn.materialdesignicons.com/5.4.55/css/materialdesignicons.min.css
feross.org	/opensource	https://feross.org/opensource
feross.org	-	http://feross.org
www.w3.org	/1999/xlink	http://www.w3.org/1999/xlink
www.w3.org	/2000/svg	http://www.w3.org/2000/svg
www.w3.org	/1998/Math/MathML	http://www.w3.org/1998/Math/MathML

Showing 1 to 10 of 100 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


1.3.132.0	IPv4	-
1.101.3.4	IPv4	-

3.5 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

THIS THING IS A+ Seriously... Finally a tool that does exactly what it says, in a simple organized way

Rich Hylton·11 Jun 2023

Just had a loading screen for a long time...

Jamie Johnson·11 Jun 2023

Very slow. Limits downloads to 500 only unless you pay $$$. It's JUNK. I'd give it 0 if I could.

Rand _·9 Jun 2023

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

IG Follower Export tool

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 26 Versions5

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating