Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Satellite View Maps

CRITICAL RISKRemoved from Chrome Web Store

Satellite View Maps

ID: blgmjndjlnhmhkjloibflgohmcnemigf

Could be malicious

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Removed

Version

3.43001.919.6197

Size

0.30 MB

Rating

3.0/5

Reviews

Users

40,000

Type

Extension

Updated

Dec 3, 2023

Publisher Contextual Analysis

Trusted

Author: https://www.satelliteviewmaps.netView Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

40,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Satellite View Maps

Your ultimate companion for seamless navigation and exploration of new horizons! SatelliteViewMaps provides clear and concise directions, ensuring you reach your destination efficiently without unnecessary delays. With its handy print directions and navigation feature, you can effortlessly plan your journey, whether driving, cycling, or walking around town. Bid farewell to traffic congestion by staying updated on real-time traffic conditions and even checking gas prices before you leave the comfort of your home. - Print directions - Gas price - Start maps in satellite view - Current traffic - Avoid slowdowns Remember to prioritize your well-being during your travels and feel free to take breaks whenever needed to recharge and relax. The SatelliteViewMaps offers the perfect balance of convenience and flexibility for a successful and enjoyable trip.

User Growth

Showing data from Mar 10, 2024 to May 06, 2024

Versions

+300%(+30,000 users)

Compared to 2 months ago

1 version released in this period

Rating Count

Total: 6 ratings

Average Rating

Current: 3.00 / 5.0+3.00

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High3

Medium2

Low0

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
3.43001.919.6197 Code review	5

Extension Version	Code Review Findings
3.43001.919.6197	5

Files with findings

3 distinct paths — top paths by unique finding count:

page.js3
assets/index-3HyyYRN0.js1
broker.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Code Injection	high	page.js (line 3885)	Content script contains logic to inject high-priority iframes (max z-index) into all visited pages. These iframes are used to display remotely-controlled content, typical of ad injection or overlay attacks.	3.43001.919.6197
2	Remote Code Loading	high	assets/index-3HyyYRN0.js (line 4167)	Fetches dynamic configuration from a remote command-and-control server using a unique installation 'ticket'. The fetched data is processed through an obfuscated mapping system to control extension behavior.	3.43001.919.6197
3	Tracking	high	broker.js (line 10)	Exposes a unique user identifier (uid) to any web page via postMessage, enabling cross-site tracking. The listener uses a regex pattern to respond to messages from arbitrary origins.	3.43001.919.6197
4	Data Exfiltration	medium	page.js (line 4052)	Exfiltrates user activity data (impressions, clicks, ready states) to a remote tracking URL provided by the background script.	3.43001.919.6197
5	Obfuscation	medium	page.js (line 2217)	Uses heavily obfuscated storage keys (e.g., 'smile', 'shout', 'apple') and data mapping to hide the nature of the data being collected and processed by the content script.	3.43001.919.6197

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


www.w3.org	/2000/svg	http://www.w3.org/2000/svg
www.satelliteviewmaps.net	/angry	https://www.satelliteviewmaps.net/angry?wandering=
clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
*	/*	https:///
*	/*	http:///
git.io	/JUIaE	https://git.io/JUIaE#
www.satelliteviewmaps.net	-	https://www.satelliteviewmaps.net
www.satelliteviewmaps.net	/app/view/public/index.html	https://www.satelliteviewmaps.net/app/view/public/index.html
github.com	/react-spring/react-use-measure/	https://github.com/react-spring/react-use-measure/#resize-observer-polyfills
fonts.googleapis.com	-	https://fonts.googleapis.com

Showing 1 to 10 of 20 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

3.0 out of 5 · 4 most recent reviews

Text reviews

Positive

Negative

scam doesn't work

Chris·3 Apr 2024

GOOB JOB

Elwin Buchholz·29 Mar 2024

Scam app. It redirects you to paid advertisements.

Jerry Vanek·17 Mar 2024

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Satellite View Maps

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 1 Version5

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews