Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Κrаκеn Сryрtо | Shortcuts

CRITICAL RISKRemoved from Chrome Web Store

Κrаκеn Сryрtо | Shortcuts

ID: cdgmcemiphgkibjdcfjhcokpailckhao

Could be malicious

Supported Languages

🇮🇱Hebrew

Extension Info & Metadata

Status

Removed

Version

1.3.4

Size

0.09 MB

Rating

0.0/5

Reviews

Users

Type

Extension

Updated

Oct 29, 2025

Publisher Contextual Analysis

Author: Kraken WalletView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Shortcut Launcher ⚡ - Open your favorite sites instantly in a sleek, modern grid.

⚡ Shortcut Launcher — your personal web dashboard! Open your favorite websites instantly in a sleek, modern grid. ✨ Add or remove shortcuts anytime, and keep your most-used links just one click away. 💻 🔥 Features: ✅ Create your own custom shortcuts ✅ Instantly open sites in new tabs ✅ Auto-favicon support for clean visuals ✅ Smooth animations and responsive design ✅ Edit or delete shortcuts easily anytime Stay organized, save time, and browse smarter with style! 🌐🚀

User Growth

Showing data from Oct 29, 2025 to Dec 15, 2025

Versions

No change in user count

Compared to 2 months ago

1 version released in this period

Rating Count

Total: 4 ratings

Average Rating

Current: 5.00 / 5.0+5.00

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical3

High1

Medium0

Low0

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.3.4 Code review	4

Extension Version	Code Review Findings
1.3.4	4

Files with findings

3 distinct paths — top paths by unique finding count:

static/background/index.js2
manifest.json1
popup.html1

S.No.	Category	Severity	File	Summary	Found in Version
1	Phishing	critical	static/background/index.js (line 61)	On every install the background worker pauses 3 seconds then fetches a URL from an attacker-controlled NocoDB table and opens it in a new tab. This is a classic C2 pattern: the extension ships clean but can deliver an…	1.3.4
2	Phishing	critical	manifest.json (line 16)	The extension name uses Unicode homoglyph substitution (Cyrillic 'а', 'е', 'С', 'р', 'о' and Greek 'Κ', 'κ') to visually impersonate 'Kraken Crypto', the well-known cryptocurrency exchange. This is a standard phishing…	1.3.4
3	Remote Code Loading	critical	static/background/index.js (line 77)	The extension fetches its payload URL from a remote NocoDB table using a hardcoded bearer token — the attacker controls the table contents and can push any URL at will without updating the extension. The hardcoded tok…	1.3.4
4	Other	high	popup.html (line 2)	The popup page title is 'Nocodb url opener', directly contradicting the advertised name 'Kraken Crypto \| Shortcuts'. This leaked title reveals that the visible shortcut-launcher UI is a decoy and the real purpose of t…	1.3.4

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


reactjs.org	/docs/error-decoder.html	https://reactjs.org/docs/error-decoder.html?invariant=
www.w3.org	/1999/xlink	http://www.w3.org/1999/xlink
www.w3.org	/XML/1998/namespace	http://www.w3.org/XML/1998/namespace
www.w3.org	/2000/svg	http://www.w3.org/2000/svg
www.w3.org	/1998/Math/MathML	http://www.w3.org/1998/Math/MathML
www.w3.org	/1999/xhtml	http://www.w3.org/1999/xhtml
app.nocodb.com	/api/v2/tables/m1unrcbt1dvabg0/records	https://app.nocodb.com/api/v2/tables/m1unrcbt1dvabg0/records
https:	-	https://${a}`:null}r.defineInteropFlag(t
https:	-	https://${i}`:null}r.defineInteropFlag(o
clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx

Showing 1 to 10 of 20 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

3.0 out of 5 · 2 most recent reviews

Text reviews

Positive

Negative

kraken Wallet is here finally

Fine Bonus·2 Nov 2025

phising!

British Mafia·30 Oct 2025

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Κrаκеn Сryрtо | Shortcuts

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

Screenshots & Videos

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 1 Version4

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating