Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: smartUp Gestures

CRITICAL RISKRemoved from Chrome Web Store

smartUp Gestures

ID: bgjfekefhjemchdeigphccilhncnjldn

Could be malicious

Supported Languages

🇧🇷Brazilian Portuguese

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

🇺🇸English

🇮🇹Italian

🇷🇺Russian

Extension Info & Metadata

Status

Removed

Version

7.3.2

Size

0.32 MB

Rating

4.5/5

Reviews

1,619

Users

90,000

Type

Extension

Updated

May 15, 2024

Publisher Contextual Analysis

Trusted

Author: pramajitkumar911View Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

90,017

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

A customizable web browser extension that enhances productivity and efficiency through the use of mouse.

SmartUp Gestures is a mouse gesture extension that allows users to quickly perform various common actions while browsing the web using mouse gestures, thus enhancing productivity and efficiency. Users can customize different mouse gestures to execute different actions, such as forward/backward navigation, opening/closing tabs, scrolling pages, zooming in/out, create post on Facebook, etc... NOTE: After the initial installation is complete, the extension will redirect to a website that displays ads to promote and install other extensions provided by the sponsor. Additionally, there will be a small area on the options page that displays the sponsor's ad. Besides this, we will not insert or display advertisements anywhere else.

User Growth

Showing data from Jan 01, 2022 to Dec 31, 2022

Versions

-3.44%(-3,207 users)

Compared to 3 months ago

6 versions released in this period

Rating Count

Total: 1,485 ratings

Average Rating

Current: 4.61 / 5.0-0.00

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High3

Medium4

Low0

Versions scanned

Showing 1 of 17 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
7.3.0 Code review	7

Extension Version	Code Review Findings
7.3.0	7

Files with findings

1 distinct path — top paths by unique finding count:

background.bundle.js7

S.No.	Category	Severity	File	Summary	Found in Version
1	Code Injection	high	background.bundle.js (line 4668)	Executes arbitrary user-stored JavaScript strings in the active tab via chrome.tabs.executeScript with `code:` and runAt document_start. Because the stored script list is a simple config blob that is synced via chrome…	7.3.0
2	Privilege Escalation	high	background.bundle.js (line 4794)	The extension wraps chrome.management.uninstall, setEnabled, and a disableAll helper that iterates every installed extension and disables them (except an allowlist). Combined with an optional `showConfirmDialog:false`…	7.3.0
3	Remote Code Loading	high	background.bundle.js (line 4953)	Fetches remote JSON (config + product/coupon list) from the developer-controlled server quan.zimoapps.com and pushes it into the content script to render an overlay on arbitrary pages. Because the payload drives on-pa…	7.3.0
4	Network Interception	medium	background.bundle.js (line 5216)	Uses declarativeNetRequest to overwrite the Origin and Referer headers on outbound requests so they appear to originate from https://www.google.com. Spoofing security-sensitive headers to bypass CORS/anti-CSRF origin …	7.3.0
5	Network Interception	medium	background.bundle.js (line 4821)	pxmovie.getData performs fetch(e.value) where `e.value` is a URL passed in from the content script message. The background has host_permissions `<all_urls>` so it will happily fetch and parse any URL an attacker who c…	7.3.0
6	Privilege Escalation	medium	background.bundle.js (line 5255)	Registers onMessageExternal using the same dispatch function as the internal onMessage handler without any sender.id allowlist. Every privileged action (extmgm disable/uninstall, jslist code execution, history/bookmar…	7.3.0
7	Unauthorized Data Collection	medium	background.bundle.js (line 4993)	The URL-shortener feature forwards the user's active tab URL (`t.url`) together with a hardcoded YOURLS signature to the developer-controlled endpoint url.zimoapps.com. This gives the operator a stream of browsing URL…	7.3.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


developer.chrome.com	/extensions/permission_warnings	https://developer.chrome.com/extensions/permission_warnings
developer.mozilla.org	/Add-ons/WebExtensions/API/browserSettings.	https://developer.mozilla.org/Add-ons/WebExtensions/API/browserSettings.
developer.chrome.com	/extensions/permission_warnings%E3%80%82	https://developer.chrome.com/extensions/permission_warnings。
developer.mozilla.org	/Add-ons/WebExtensions/API/browserSettings%E3%80%82	https://developer.mozilla.org/Add-ons/WebExtensions/API/browserSettings。
npms.io	/search	https://npms.io/search?q=ponyfill.
github.com	/uuidjs/uuid	https://github.com/uuidjs/uuid#getrandomvalues-not-supported
www.facebook.com	-	https://www.facebook.com
smartupgestures.com	-	https://smartupgestures.com
www.google.com	/search	https://www.google.com/search?q=%s
www.bing.com	/search	https://www.bing.com/search?q=%s

Showing 1 to 10 of 70 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

2.3 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

This is really good

Andrew Lapteff ІПЗ-25·27 May 2024

为��么"标签页"和"在"扩展程序"页面不用能手势? 要的就是所有的页面都可以手势,鸡肋

libing ONEPIECE·24 May 2024

为什么"标签页"和"在"扩展程序"页面不用能手势? 要的就是所有的页面都可以手势,鸡肋

libing ONEPIECE·24 May 2024

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

smartUp Gestures

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 17 Versions7

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating