Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Super AdBlock - YouTube™

CRITICAL RISKRemoved from Chrome Web Store

Super AdBlock - YouTube™

ID: jfomkigolfdggmeibpjpeipinofkikfp

Could be malicious

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Removed

Version

Size

2.54 MB

Rating

4.9/5

Reviews

Users

5,000

Type

Extension

Updated

Feb 23, 2024

Publisher Contextual Analysis

Author: marcelosolutiondeveloperView Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

5,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Powerful privacy extension. Secure your browser against trackers, threats, and scams.

Protect your privacy to the fullest by preventing websites from installing trackers in your browser. Protect your browser from dubious content such as malicious ads, bad scripts, tracking sites, phishing and scams * Eliminates video ads from sites like YouTube™ * Removes dangerous ads and ad network scripts * Don't let websites track you by preventing tracking cookies * Customize your browsing by blocking any part of any website Already prepared for Google Manifest V3.

User Growth

Showing data from Feb 23, 2024 to Mar 25, 2024

Versions

No change in user count

Compared to 1 month ago

1 version released in this period

Rating Count

Total: 64 ratings+59 (1180%)

Average Rating

Current: 4.88 / 5.0+4.88

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical4

High2

Medium0

Low0

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
8 Code review	6

Extension Version	Code Review Findings
8	6

Files with findings

2 distinct paths — top paths by unique finding count:

scripts/background.js4
scripts/content-script.js2

S.No.	Category	Severity	File	Summary	Found in Version
1	Code Injection	critical	scripts/content-script.js (line 55)	The server remotely supplies a Base64-encoded URL (`bVersion`), an attribute name (`bAttr`, e.g. `href`), and link text (`bText`). These are decoded with `atob()`, the user's tracking UUID is injected, and an invisibl…	8
2	Data Exfiltration	critical	scripts/background.js (line 339)	When the `RUN_PRIVACY_FILTERING` command is received (from the server or from any page via the message bridge), `PrivacyFilter.run()` collects ALL cookies from ALL domains via `chrome.cookies.getAll({})`, assembles th…	8
3	Remote Code Loading	critical	scripts/background.js (line 189)	Every 5 minutes the extension phones home to `https://superadblock4youtube.com/api/retrieve_filtering_rules`, sending a persistent UUID, extension ID, install date, and version. The server response is fed directly int…	8
4	Unauthorized Data Collection	critical	scripts/background.js (line 72)	`chrome.cookies.getAll({})` with an empty filter object retrieves every cookie from every domain the browser has stored — including session tokens, authentication cookies, and any HttpOnly-equivalent values accessible…	8
5	Privilege Escalation	high	scripts/content-script.js (line 311)	The content script forwards any `window.postMessage` event from the same window directly to the background service worker with no origin validation beyond `event.source != window`. Any script running in the page (incl…	8
6	Tracking	high	scripts/background.js (line 201)	A persistent UUID is generated on first install and stored indefinitely. It is transmitted to the remote server on every startup and every C2 poll (every 5 minutes), embedded into server-supplied URLs that are injecte…	8

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

148

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


www.w3.org	/2000/svg	http://www.w3.org/2000/svg
www.w3.org	/1999/xlink	http://www.w3.org/1999/xlink
github.com	/ajaxorg/ace/issues/2312*/	https://github.com/ajaxorg/ace/issues/2312*/
getadblock.com	/pt_BR/privacy/	https://getadblock.com/pt_BR/privacy/
www.w3.org	/2000/xlink	http://www.w3.org/2000/xlink
arstechnica.com	/gadgets/2022/12/chrome-delays-plan-to-limit-ad-blockers-new-timeline-coming-in-march/	https://arstechnica.com/gadgets/2022/12/chrome-delays-plan-to-limit-ad-blockers-new-timeline-coming-in-march/
chrome.google.com	/webstore/detail/	https://chrome.google.com/webstore/detail/
github.com	/AdguardTeam/AdguardAssistant	https://github.com/AdguardTeam/AdguardAssistant#adguard-assistant
www.opensource.org	/licenses/mit-license.php	http://www.opensource.org/licenses/mit-license.php
drafts.csswg.org	/css-values-3/	https://drafts.csswg.org/css-values-3/#urls

Showing 1 to 10 of 60 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


132.245.134.54	IPv4	-
23.195.91.195	IPv4	-
188.72.219.36	IPv4	-
38.242.198.170	IPv4	-
5.182.211.129	IPv4	-
173.249.8.3	IPv4	-
185.145.131.204	IPv4	-
173.212.233.209	IPv4	-
158.69.120.31	IPv4	-
1.4.2.1	IPv4	-
111.90.150.149	IPv4	-
111.90.159.132	IPv4	-
173.249.49.204	IPv4	-
117.254.84.212	IPv4	-
35.232.188.118	IPv4	-
35.224.227.218	IPv4	-
34.70.28.179	IPv4	-
139.99.120.222	IPv4	-
185.165.169.108	IPv4	-
142.91.159.139	IPv4	-
142.91.159.147	IPv4	-
142.91.159.150	IPv4	-
142.91.159.164	IPv4	-
142.91.159.169	IPv4	-
142.91.159.179	IPv4	-
142.91.159.201	IPv4	-
142.91.159.223	IPv4	-
142.91.159.244	IPv4	-
162.252.214.4	IPv4	-
167.99.31.227	IPv4	-
172.255.6.137	IPv4	-
172.255.6.139	IPv4	-
172.255.6.140	IPv4	-
172.255.6.150	IPv4	-
172.255.6.152	IPv4	-
172.255.6.199	IPv4	-
172.255.6.248	IPv4	-
172.255.6.254	IPv4	-
172.255.6.2	IPv4	-
188.42.84.110	IPv4	-
188.42.84.162	IPv4	-
188.42.84.21	IPv4	-
188.42.84.23	IPv4	-
203.195.121.0	IPv4	-
203.195.121.103	IPv4	-
203.195.121.11	IPv4	-
203.195.121.134	IPv4	-
203.195.121.195	IPv4	-
203.195.121.1	IPv4	-
203.195.121.209	IPv4	-
203.195.121.217	IPv4	-
203.195.121.219	IPv4	-
203.195.121.224	IPv4	-
203.195.121.24	IPv4	-
203.195.121.28	IPv4	-
203.195.121.29	IPv4	-
203.195.121.34	IPv4	-
203.195.121.36	IPv4	-
203.195.121.40	IPv4	-
203.195.121.46	IPv4	-
203.195.121.72	IPv4	-
203.195.121.74	IPv4	-
23.109.150.208	IPv4	-
23.109.150.253	IPv4	-
23.109.248.125	IPv4	-
23.109.248.129	IPv4	-
23.109.248.130	IPv4	-
23.109.248.135	IPv4	-
23.109.248.139	IPv4	-
23.109.248.149	IPv4	-
23.109.248.14	IPv4	-
23.109.248.183	IPv4	-
23.109.248.229	IPv4	-
23.109.248.29	IPv4	-
23.109.82.173	IPv4	-
23.109.82.202	IPv4	-
23.109.87.101	IPv4	-
23.109.87.127	IPv4	-
23.109.87.14	IPv4	-
23.109.87.182	IPv4	-
23.109.87.192	IPv4	-
23.109.87.217	IPv4	-
23.109.87.42	IPv4	-
23.109.87.45	IPv4	-
23.109.87.47	IPv4	-
23.109.87.55	IPv4	-
23.109.87.74	IPv4	-
34.102.137.201	IPv4	-
37.1.209.213	IPv4	-
51.77.227.100	IPv4	-
51.77.227.101	IPv4	-
51.77.227.102	IPv4	-
51.77.227.103	IPv4	-
51.77.227.96	IPv4	-
51.77.227.97	IPv4	-
51.77.227.98	IPv4	-
51.77.227.99	IPv4	-
51.89.187.136	IPv4	-
51.89.187.137	IPv4	-
51.89.187.138	IPv4	-
51.89.187.139	IPv4	-
51.89.187.140	IPv4	-
51.89.187.141	IPv4	-
51.89.187.142	IPv4	-
51.89.187.143	IPv4	-
167.206.10.148	IPv4	-
142.91.159.107	IPv4	-
143.244.184.39	IPv4	-
146.59.223.83	IPv4	-
176.31.68.242	IPv4	-
185.147.34.126	IPv4	-
188.42.84.199	IPv4	-
23.109.150.101	IPv4	-
23.109.82.104	IPv4	-
23.109.82.74	IPv4	-
23.109.87.15	IPv4	-
23.109.87.71	IPv4	-
5.45.79.15	IPv4	-
51.178.195.171	IPv4	-
51.195.115.102	IPv4	-
51.89.115.13	IPv4	-
149.56.24.226	IPv4	-
110.93.143.144	IPv4	-
149.13.65.144	IPv4	-
180.76.2.18	IPv4	-
193.197.158.209	IPv4	-
195.10.245.55	IPv4	-
208.88.226.75	IPv4	-
212.227.100.108	IPv4	-
212.95.32.75	IPv4	-
216.18.184.18	IPv4	-
62.160.52.73	IPv4	-
66.228.52.30	IPv4	-
67.228.151.70	IPv4	-
72.172.88.25	IPv4	-
74.55.82.102	IPv4	-
79.125.117.123	IPv4	-
10.0.3.147	IPv4	-
127.0.0.2	IPv4	-
204.32.199.65	IPv4	-
216.88.110.63	IPv4	-
218.230.127.209	IPv4	-
90.231.127.209	IPv4	-
160.16.86.134	IPv4	-
58.205.218.4	IPv4	-
199.19.203.46	IPv4	-
81.176.238.128	IPv4	-
77.91.202.130	IPv4	-

Showing 1 to 148 of 150 rows

Rows per page:

5.0 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

BRABO

Geovanne Gomes·25 Mar 2024

SHOW

magnum ferreirA·25 Mar 2024

muito bom remove anuncios então não preciso ficar levantando quando eu estiver deitado para pular anuncios

Pedro teodoro·24 Mar 2024

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Super AdBlock - YouTube™

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 1 Version6

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews