Security Alert: Confirmed Malware
Roblox Themes & New Tab
ID: fnjimbacflicbeiipbgnekoofpkchdkf
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- Best Ever PromotionsView Profile
Roblox 4K Themes And More Extra Functionality Can Be Found Inside Our Roblox Extension
Goodbye boring new tab page and hi fabulous browser! We hapilly created this great Roblox extension for you, so we hope you will like using it! Loving followers of Roblox, Start using our amazing extension and enjoy the best quality backgrounds and other amazing functionalities for your new tab page. This is the new and improved new tab you have been waiting for, and it is finally here. If you have any questions/ideas/reviews about Roblox that you think can be helpful, let us know! We will love to hear and get better :) We will be more than pleased to hear what you think about our Roblox extension and figure out ways to improve it. *Remove* If we are not your cup of tea, that's all right. On your chrome settings, you'll fine the app tab. In there, select our Roblox app and press the uninstall button. You can easily press the Roblox icon on the top right corner of your browser, and just select remove, easy as that. We want you to fully enjoy our Roblox extension's functionalities, that's why you'll notice the change in the layout and options of your new tab page. That is needed so you can enjoy the full shortcuts to our functionalities and updated. This only means that your new Robloxtab page, will work better, be much more beautiful and full of great wallpapers and new features. Let us tell you a bit about our newest elements on our Roblox extension,and all the new and great features we have installed for you - *Use your new tab page as a workplace - we added a costume memo bar for you TDL and an local clock, so you'll always know the exact time and never forget to do anything. *A weather analysis - as local as possible, synced to your current location, so you will know what the weather has installed for you. *Search bar for your convenience - use the costume search bar to search anything you need online. No need to open a new tab, just search off your Roblox new tab - fast and easy. *Wallpaper catalog for you to select from your desired Roblox pics- the most beautiful wallpapers for you to use and enjoy every time you open a new tab. *Play interactive games using the games bar - No need to go far, all your favorite games are right here on the Roblox new tab page. Hey, we just wanted to say thanks for joining and hope you find the Roblox extension wonderful!
The entire new-tab override page is a zero-delay meta-refresh redirect to `https://foutheme.club/roblox-theme`. Every time any user opens a new tab, they are silently sent to a publisher-controlled domain that can serve ads, collect browsing context, or change behavior server-side at will. With ~969K installs this represents a large-scale traffic hijacking operation.
< html> < head> < title> Roblox New Tab < /title> < meta http - equiv="refresh" content="0;URL='https://foutheme.club/roblox-theme'" /> < /head> < /html>The bundled manifest declares `chrome_url_overrides.newtab`, a background script, and a browser_action — none of which appear in the published CWS manifest summary (which only lists `default_locale` and `manifest_version`). This mismatch means the CWS listing did not surface the new-tab hijacking capability, potentially hiding it from users reviewing the store page before install.
{ "chrome_url_overrides": { "newtab": "main_new.html" }, ... "background": { "scripts": ["myscript1.js"] }, "version": "0.2.6"}Registers an uninstall-tracking ping to the same publisher-controlled domain over plain HTTP, leaking the fact that the user removed the extension. The on-install handler opens a new tab (likely to drive an additional page impression on the hijacked domain or a separate landing page).
chrome.runtime.setUninstallURL('http://foutheme.club/uninstall.html?ext=roblox-theme');chrome.runtime.onInstalled.addListener(function(details) { if (details.reason == "install") { chrome.tabs.create({}); }});By severity
Versions scanned
Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.
| Extension Version | Code Review Findings |
|---|---|
| 0.2.6 | 3 |
Files with findings
3 distinct paths — top paths by unique finding count:
- main_new.html1
- manifest.json1
- myscript1.js1
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
Gain full insight into all external connections.
Upgrade for full visibility.
Gain full insight into all external connections.
Upgrade for full visibility.
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.