Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Storage Controller

CRITICAL RISKRemoved from Chrome Web Store

Storage Controller

ID: iahlkjgkkhckgldjoapifhoeocneiiel

Could be malicious

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Removed

Version

Size

0.02 MB

Rating

5.0/5

Reviews

Users

4,498

Type

Extension

Updated

Nov 18, 2022

Publisher Contextual Analysis

Author: glo.mrtkView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

4,498

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Storage & Cookies Control

Storage & Cookies Control is an extension that lets you control the cookies and data on the current page youre visiting With our extension, you can easily wipe the data of the current page, no more annoying data collection!

User Growth

Showing data from Nov 03, 2022 to Nov 30, 2022

Versions

No change in user count

Compared to 27 days ago

2 versions released in this period

Rating Count

Total: 1 ratings+1 (0%)

Average Rating

Current: 5.00 / 5.0+5.00

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical2

High4

Medium0

Low0

Versions scanned

Showing 1 of 2 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1 Code review	6

Extension Version	Code Review Findings
1	6

Files with findings

2 distinct paths — top paths by unique finding count:

background.js5
content.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Data Exfiltration	critical	background.js (line 32)	The extension intercepts search queries from Google, Yahoo, and Bing in real time, extracts the search term from the URL, and redirects the user's active tab to a third-party domain `ioyeesihigh.xyz` with the query ap…	1
2	Network Interception	critical	background.js (line 121)	The extension monitors every top-level navigation event across all tabs using `webNavigation.onBeforeNavigate`, intercepting navigation before it completes. This gives it the ability to inspect and redirect any URL th…	1
3	Obfuscation	high	background.js (line 36)	The `_dd` variable holds an encoded/obfuscated string that is sent as a parameter (`&dd=`) with every search query redirect to the attacker-controlled domain. The value appears to be a base64-encoded or XOR-encoded to…	1
4	Other	high	background.js (line 87)	The extension creates a repeating alarm firing every 6 seconds (0.1 minutes) to keep the service worker alive persistently. This is a persistence mechanism designed to prevent the browser from suspending the backgroun…	1
5	Phishing	high	background.js (line 92)	When a new tab is opened from a Bing search results page, the extension moves it into a specially sized, repositioned window occupying 52% of screen width and offset to the right. This manipulates the user's browsing …	1
6	Phishing	high	content.js (line 26)	The content script replaces Bing's logo with the extension's own branding image on Bing search result pages, modifying the page's visual identity to make it appear as a custom search engine. It also forces all search …	1

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
*	/*	http:///
*	/*	https:///
fonts.googleapis.com	/css2	https://fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700;900&display=swap

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Storage Controller

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 2 Versions6

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Growth

Rating Count

Average Rating