Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: TikTok™ for Desktop

CRITICAL RISKRemoved from Chrome Web Store

TikTok™ for Desktop

ID: cdphkkecaejjijafinepmkefiegpkdjf

Could be malicious

Supported Languages

🇧🇷Brazilian Portuguese

🇪🇸Catalan

🇩🇰Danish

🇳🇱Dutch

🇺🇸English

🇪🇪Estonian

🇫🇷French

🇩🇪German

🇮🇹Italian

🇯🇵Japanese

🇰🇷Korean

🇲🇽Latin American Spanish

🇱🇹Lithuanian

🇳🇴Norwegian

🇵🇹Portuguese

🇪🇸Spanish

🇸🇪Swedish

🇹🇭Thai

🇹🇷Turkish

🇻🇳Vietnamese

Extension Info & Metadata

Status

Removed

Version

1.2.1

Size

0.38 MB

Rating

3.1/5

Reviews

Users

70,000

Type

Extension

Updated

Mar 8, 2024

Publisher Contextual Analysis

Trusted

Author: BlueApps.incView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

122,639

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Experience TikTok™ for desktop like never before: a Chrome extension that brings exciting and creative content to your screen

Experience TikTok™ like never before with our innovative Chrome extension! TikTok™ for Desktop brings the magic of this trending video platform directly to your desktop screen. It's time to dive into the exciting world of short videos, spontaneity, and authenticity, all from the comfort of your browser! 🌟 Explore and Download: Browse through an endless stream of creative and exciting content on TikTok™. And that's not all! You can also download your favorite videos to watch offline whenever you want. 📱 Mobile Experience on Your Desktop: Missing the feel of using TikTok on your mobile device? Look no further! Our extension emulates the mobile experience, allowing you to enjoy all the unique features and characteristics right on your desktop. 🎵 Incredible Sound Library: Boost your creativity by adding millions of music tracks and fresh sounds to your videos. With regular updates across all genres, you'll never run out of options to bring your creations to life! 🌎 Build Your Community: Join a global community of TikTok™ creators and enthusiasts. Explore exciting videos, follow your favorite creators, and share your highlights with the world. 🎉 Simple Steps: Visit tiktok.com Click on the icon of our extension in the top corner of your browser. Immerse yourself in the TikTok™ fun on your desktop! No more device limitations, no more FOMO (fear of missing out). TikTok™ for Desktop offers you the complete experience in every second that counts. Ready to dive into the excitement? Install the extension now and let the uninterrupted TikTok™ fun begin!

User Growth

Showing data from Jan 01, 2022 to Dec 31, 2022

Versions

+28.72%(+15,617 users)

Compared to 3 months ago

3 versions released in this period

Rating Count

Total: 15 ratings

Average Rating

Current: 3.33 / 5.0+3.33

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical5

High3

Medium2

Low0

Versions scanned

Showing 1 of 13 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.1.2 Code review	10

Extension Version	Code Review Findings
1.1.2	10

Files with findings

4 distinct paths — top paths by unique finding count:

functions.js7
back.js1
rules.json1
worker.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Code Injection	critical	functions.js (line 14094)	The Update method navigates the hidden tab to the attacker-supplied URL (muted, autoDiscardable), then dispatches to Facebook/YouTube-specific scripted click handlers and applies BloqueCSS to cover the page. The dwell…	1.1.2
2	Code Injection	critical	functions.js (line 13570)	When a hidden tab lands on youtube.com, the extension injects a script that auto-clicks the YouTube 'goto site' redirect button, or failing that, reads the 'q=' query parameter and navigates window.location to whateve…	1.1.2
3	Code Injection	critical	functions.js (line 13600)	Mirror of the YouTube handler for facebook.com: the extension programmatically clicks Facebook's outbound-link interstitial button (a[target="_self"]) or extracts Facebook's 'u=' redirect parameter and navigates to it…	1.1.2
4	Remote Code Loading	critical	functions.js (line 15136)	The extension fetches a 'sponsor' configuration from a third-party C2 endpoint (api.devfunny.com/api/spontest/) unrelated to TikTok. The returned JSON drives the extension's behavior (which URLs to open, for how long,…	1.1.2
5	Tracking	critical	functions.js (line 15374)	openTab/openWIN silently create tabs or minimized windows, iterate through the remote-supplied URL list, navigate each (muted + autoDiscardable) via the Update() method, then close the tab/window when done. This is co…	1.1.2
6	Network Interception	high	rules.json (line 1)	declarativeNetRequest rule rewrites the User-Agent on every tiktok.com main_frame/sub_frame request to an outdated mobile UA string. This is consistent with evading TikTok's desktop bot detection so the extension can …	1.1.2
7	Obfuscation	high	functions.js (line 14162)	BloqueCSS injects a full-viewport white overlay (z-index:9999999) into every hidden tab so the page content is completely hidden from the user even if the tab surfaces. This obfuscation step is a hallmark of ad/impres…	1.1.2
8	Privilege Escalation	high	worker.js (line 106)	The service worker registers a declarativeContent rule that injects back.js into every http/https page the user visits — 'matches' is unrestricted (not scoped to tiktok.com). Combined with the broad <all_urls> host pe…	1.1.2
9	Network Interception	medium	back.js (line 1)	back.js, injected into every page visited, silently redirects any apps.apple.com page away to tiktok.com/trending if the referrer contains 'tiktok'. Rewriting the user's navigation without consent (even in this narrow…	1.1.2
10	Tracking	medium	functions.js (line 14620)	Uses worldtimeapi.org/api/ip to obtain an IP-based server time, which is then used to gate the 'sponsor' campaign scheduling ('isScanTime'). Relying on an external IP-tied time service to throttle malicious actions is…	1.1.2

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


www.tiktok.com	/*	https://www.tiktok.com/*
github.com	/facebook/regenerator/blob/main/LICENSE	https://github.com/facebook/regenerator/blob/main/LICENSE
www.tiktok.com	/trending/	https://www.tiktok.com/trending/
momentjs.com	/guides/	http://momentjs.com/guides/#/warnings/define-locale/
momentjs.com	/guides/	http://momentjs.com/guides/#/warnings/js-date/
momentjs.com	/guides/	http://momentjs.com/guides/#/warnings/min-max/
momentjs.com	/guides/	http://momentjs.com/guides/#/warnings/add-inverted-param/
momentjs.com	/guides/	http://momentjs.com/guides/#/warnings/zone/
momentjs.com	/guides/	http://momentjs.com/guides/#/warnings/dst-shifted/
feross.org	-	https://feross.org

Showing 1 to 10 of 40 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

2.9 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

doesnt work, cant swipe, cant search, cant share, cant view or write comments, useless.

sally sally·28 Mar 2024

uma pena que nao opçao live, mas é otimo pra quem so quer ver videos, sem live

kelvin ratzk·25 Mar 2024

pretty good but i cant click comments or share, theres no favorite button too

Amr K.·23 Mar 2024

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

TikTok™ for Desktop

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 13 Versions10

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating