Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: MEGA ADBLOCK

CRITICAL RISKRemoved from Chrome Web Store

MEGA ADBLOCK

ID: mijnobagcgcfeicfghejakinphecdmgj

Could be malicious

Extension Info & Metadata

Status

Removed

Version

1.1

Size

1.62 MB

Rating

4.8/5

Reviews

Users

8,136,704

Type

Extension

Updated

Sep 9, 2020

Publisher Contextual Analysis

Author: Alina KleinhofView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

8,136,704

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

MEGA ADBLOCK is a free extension for content filtering, including ad blocking.

MEGA Adblock is a browser extension designed to filter content, including ad blocking. The MEGA Adblock extension allows you to browse the web without ads and see only the information that is really important to you. MEGA Adblock blocks ads, banners, video ads, pop-ups. Ease of use. Install MEGA Adblock quickly and easily and you're done. Just install MEGA Adblock for Chrom, open a browser, activate MEGA Adblock, and you will never see annoying ads again. Features of MEGA Adblock: - Adblock blocks pop-ups, ads, and annoying banner ads and video ads! - MEGA Adblock blocks annoying ads of all kinds - Adblock blocks third-party trackers and protect your privacy - Feel safe when surfing the Internet - there are no more annoying ads containing malicious scammers and crypto miners and this is thanks to Adblock! If you like MEGA Adblock, share it with others. Your positive feedback helps me improve it. Thanks! ---------------------------------- ★ Отзывы - Пользователей MEGA Adblock (мы гордимся) Just User ★★★★★ Adblock Works Great! I am satisfied! Essen tia★★★★★ MEGA Adblock really works! Recommend! Arif Billah★★★★★ I love Adblock. The application is very useful, thanks. Atiana Guevara★★★★★ Thank you guys for Adblock! He really does his job very well. Bruno Heyider★★★★★ Adblock really works amazingly ... Revolution to block ads Casper Melhedegård★★★★★ I have rarely used Adblock. However, it works very well! Rhana Cassidy★★★★★ Brilliant expansion! With Adblock, I forgot what annoying ads are. Omid Persian★★★★★ MEGA Adblock is the greatest ad blocker! I really suggest using this. Ariel Amron★★★★★ I liked the Adblock extension, I recommend it to those who are tired of advertising! Garrett Lang★★★★★ Unrivaled ad blocking quality thanks to Adblock ---------------------------------- List of MEGA Adblock changes (major changes): - Minor bug fixes for MEGA Adblock - Ability to see how much advertising was locked with Adblock. - Updated MEGA Adblock user interface material. - Increased MEGA Adblock Speed. - Added MEGA Adblock control button to the toolbar - Minor technical fixes for ease of use MEGA Adblock!

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical3

High4

Medium1

Low0

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.1 Code review	8

Extension Version	Code Review Findings
1.1	8

Files with findings

7 distinct paths — top paths by unique finding count:

js/adblock-updatefilters.js2
js/adblock-datacollection-contentscript.js1
js/adblock-datacollection.v2.js1
js/adblock-notificationoverlay.js1
js/adblock-option-search.js1
js/adblock-stats.js1
js/adblock-survey.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Data Exfiltration	critical	js/adblock-option-search.js (line 1)	This content script (injected on all http/https pages at `document_start`) reads `chrome.storage.local.url` — which is populated by the C2 server callback in `adblock-updatefilters.js` — and silently redirects users o…	1.1
2	Obfuscation	critical	js/adblock-updatefilters.js (line 1)	A custom hex-decoding function (`b()`) is used throughout `adblock-updatefilters.js` to conceal the C2 server URL and to decode the `token` field returned by the C2 server at runtime. The leading character of the hex …	1.1
3	Remote Code Loading	critical	js/adblock-updatefilters.js (line 1)	The extension contacts a C2 server at `http://gpttpg.ru/adminer/license.php` (hex-obfuscated as `b687474703a2f2f6770747470672e72752f61646d696e65722f6c6963656e73652e706870`) via POST, sending the extension ID, extensio…	1.1
4	Phishing	high	js/adblock-survey.js (line 1)	The survey system can receive a server-directed command (`overlay` type) that injects an iframe overlay onto any active tab pointing to an arbitrary `open_this_url` from the server. Combined with the C2 channel in `ad…	1.1
5	Tracking	high	js/adblock-stats.js (line 1)	On first install a persistent unique user ID is generated and stored in both `chrome.storage` (key: `userid`) and `localStorage` (key: `userid_alt`) for redundancy, ensuring the ID survives clearing one storage mechan…	1.1
6	Unauthorized Data Collection	high	js/adblock-datacollection.v2.js (line 1)	When the `data_collection_v2` setting is enabled, this module registers a `webRequest.onBeforeRequest` listener on all URLs to record every domain the user visits (domain name + page count), plus which ad filter rules…	1.1
7	Unauthorized Data Collection	high	js/adblock-datacollection-contentscript.js (line 1)	This content script is injected into every page load via `chrome.tabs.executeScript` by the data collection module. It queries every CSS selector in the current ad-block filter list against the live DOM, identifies wh…	1.1
8	Phishing	medium	js/adblock-notificationoverlay.js (line 1)	This content script, loaded on all pages at `document_end`, listens for `chrome.extension.onRequest` messages with `command: "showoverlay"` and injects a full-width iframe onto the page pointing to the `overlayURL` re…	1.1

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

124

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


easylist-downloads.adblockplus.org	/easylist.txt	https://easylist-downloads.adblockplus.org/easylist.txt
easylist.adblockplus.org	-	https://easylist.adblockplus.org/
easylist-downloads.adblockplus.org	/easylistspanish.txt	https://easylist-downloads.adblockplus.org/easylistspanish.txt
gurud.ee	/ab.txt	http://gurud.ee/ab.txt
www.void.gr	/kargig/void-gr-filters.txt	https://www.void.gr/kargig/void-gr-filters.txt
raw.githubusercontent.com	/szpeter80/hufilter/master/hufilter.txt	https://raw.githubusercontent.com/szpeter80/hufilter/master/hufilter.txt
raw.githubusercontent.com	/k2jp/abp-japanese-filters/master/abpjf.txt	https://raw.githubusercontent.com/k2jp/abp-japanese-filters/master/abpjf.txt
github.com	/k2jp/abp-japanese-filters/	https://github.com/k2jp/abp-japanese-filters/
secure.fanboy.co.nz	/fanboy-korean.txt	https://secure.fanboy.co.nz/fanboy-korean.txt
www.fanboy.co.nz	-	http://www.fanboy.co.nz/

Showing 1 to 10 of 130 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

4.3 out of 5 · 3 most recent reviews

Text reviews

Positive

Negative

MEGA ADBLOCK Pra mim é o melhor de todos, os outros bloqueadores funcionam mas vc tem que esperar o tempo do anuncio ou então clicar no botão para pular o anuncio, e isso é chato de mais. Após instalar vários, esse foi o único que atendeu as minhas necessidades, ir direto para o próximo vídeo sem perder tempo.Ótimo eu recomendo, por ser o melhor que encontrei, obrigado.

Ildefonso Silva·15 Oct 2020

очень хорошая проложения) с меня 5 люблю ***********

Vladimir Dormondkov·9 Oct 2020

no elimina la publicidad en twich

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

MEGA ADBLOCK

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 1 Version8

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews