Chrome Web Store
3Versions
1Code reviewed

No malware found

In code review (v1.0.5.0)

Our reviewer read version 1.0.5.0 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.

7 indicators in this extension

7 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

ČSOB Electronic Signature, used by 70,000 people, showed no malicious code in Extension Auditor's review. It comes from a trusted publisher and was last updated in October 2023.

Analyst notes

The extension is a legitimate ČSOB banking component for electronic signing with smart cards. Its use of nativeMessaging and cookies aligns with its stated purpose: communicating with a local native application and injecting session cookies necessary for smart card signing operations. No network exfiltration or unauthorized third-party data collection occurs; data is only sent to the local native host. All permissions are necessary and match the extension's functionality. The ML model's low score (0.00) and the high risk-engine flags are due to broad permissions and an older manifest version, which are expected for this type of trusted banking extension.

ČSOB Electronic Signature

ČSOB Electronic Signature Chrome extension security report

ID: eahecpanklnlonjjlojnjjcigcbflego

Supported Languages

🇨🇿Czech
🇺🇸English
🇸🇰Slovak

Extension Info & Metadata

Status
Active
Version
2.1.5.0
Size
0.03 MB
Rating
4.2/5
Reviews
11
Users
70,000
Type
Extension
Updated
Oct 5, 2023
Category
Workflow & planning
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
1extension
All still listed
Scanned by Extension Auditor — Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Trusted
Author
Československá obchodní banka, a. s.
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Website
Visit
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
70,000

Screenshots & videos

Screenshot 1

Install growth

Item
Type
Severity
Description
nativeMessaging
Permission
High
This permission enables communication with applications installed on your computer. Rated High because it can exchange data with native programs, potentially exposing system-level information and local files.
cookies
Permission
High
This permission provides full access to read and modify browser cookies. Rated High because it can steal session tokens, modify authentication cookies, and compromise accounts across websites.
activeTab
Permission
Medium
This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
*://*.ica.cz/*
Host
Medium
Host permission — access limited to this URL pattern.
*://*.csob.cz/*
Host
Medium
Host permission — access limited to this URL pattern.
*://*.csob.sk/*
Host
Medium
Host permission — access limited to this URL pattern.
*://localhost/*
Host
Medium
Host permission — access limited to this URL pattern.

7 indicators in this extension

7 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

ČSOB e-banking component for electronic signing, operating with a smart card or other PKI operations.

Read the publisher’s full description

The extension to be used for easy and secure chip card signing in ČSOB CEB, ČSOB InternetBanking 24 and ČSOB BusinessBanking 24. ČSOB is the only bank that provides Internet banking users with qualified certificates for chip cards. Therefore all users get the highest security for their Internet transactions. The certificates can also be used to communicate with state administration institutions (tax authorities, health insurance companies), sign e-mails and other operations that need high security. To see a chip card operating correctly install the latest version of the SecureStore application (www.csob.cz/software).

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
4
IPv4
1

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

7 indicators in this extension

7 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
2.1.0.1
Latest
0.03 MBNot scanned—
96ab882a9c20601f40f6fe8d7c9157ab7a0baa47e2423c70dc37e4a2045ccc05
1.0.5.0
0.03 MBNo malware found0
6af0439d7b7e28bc46eeaf8f0ecf35e3f440218e208a64a1509474bc8783c3b3
2.1.5.0
0.03 MBNot scanned—
96ab882a9c20601f40f6fe8d7c9157ab7a0baa47e2423c70dc37e4a2045ccc05
Showing 1 to 3 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.