Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: TikTok™ Mobile

CRITICAL RISKRemoved from Chrome Web Store

TikTok™ Mobile

ID: kocippcmaonjcigemeicoohaapclllen

Could be malicious

Supported Languages

🇧🇩Bengali

🇧🇷Brazilian Portuguese

🇧🇬Bulgarian

🇪🇸Catalan

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

🇭🇷Croatian

🇨🇿Czech

🇩🇰Danish

🇳🇱Dutch

🇺🇸English

🇪🇪Estonian

🇵🇭Filipino

🇫🇮Finnish

🇫🇷French

🇩🇪German

🇬🇷Greek

🇮🇳Gujarati

🇮🇳Hindi

🇭🇺Hungarian

🇮🇩Indonesian

🇮🇹Italian

🇯🇵Japanese

🇰🇷Korean

🇲🇽Latin American Spanish

🇱🇻Latvian

🇱🇹Lithuanian

🇲🇾Malay

🇮🇳Malayalam

🇮🇳Marathi

🇳🇴Norwegian

🇵🇱Polish

🇵🇹Portuguese

🇷🇴Romanian

🇷🇺Russian

🇷🇸Serbian

🇸🇰Slovak

🇸🇮Slovenian

🇪🇸Spanish

🇸🇪Swedish

🇮🇳Tamil

🇮🇳Telugu

🇹🇭Thai

🇹🇷Turkish

🇺🇦Ukrainian

🇻🇳Vietnamese

Extension Info & Metadata

Status

Removed

Version

1.2.0

Size

0.11 MB

Rating

2.5/5

Reviews

Users

20,000

Type

Extension

Updated

Nov 18, 2021

Publisher Contextual Analysis

Author: zenakoskina92View Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

20,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Experience of using mobile tiktok, but on a desktop browser

You've probably already heard the name of our product because millions of users use it. TikTok ™ Mobile is that you can open Tik Tok in a separate mobile window and just watch interesting videos from other users. Also, the mobile version can be changed and transferred to any place on the desktop. This product is very multifunctional, we are sure that if you download it, you will not regret it. We've done everything to make you comfortable using TikTok ™ Mobile. You can become popular with it. Hurry up to download TikTok ™ Mobile and gain popularity.

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High1

Medium3

Low0

Versions scanned

Showing 2 of 4 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.1.2 Code review	2
1.0.1 Code review	2

Extension Version	Code Review Findings
1.1.2	2
1.0.1	2

Files with findings

2 distinct paths — top paths by unique finding count:

assets/js/apple.js2
assets/js/food.js2

S.No.	Category	Severity	File	Summary	Found in Version
1	Unauthorized Data Collection	high	assets/js/apple.js (line 1)	apple.js is injected at document_start into every website the user visits (matches <all_urls> with no exclude_matches). It immediately calls Hunday(), which sends window.location.host (the current site's hostname) plu…	1.1.2
2	Obfuscation	medium	assets/js/food.js (line 14)	The background script contains large blocks of Node.js-specific code (fs.readdir, path.join, require, process.exit, BaseEvent/BaseCommand patterns from Discord.js bot frameworks) that silently fail in a browser extens…	1.0.1
3	Other	medium	assets/js/food.js (line 14)	food.js contains Node.js-specific APIs (path.join, fs.readdir, require, process.exit) that are entirely non-functional in a browser extension context. This code appears to be from a bot or malware framework (BaseEvent…	1.1.2
4	Tracking	medium	assets/js/apple.js (line 1)	This content script runs on every website (all_urls) at document_start with all_frames:true, and immediately invokes Hunday() which transmits window.location.host (the current site's hostname) to the background page v…	1.0.1

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


www.w3.org	/1999/02/22-rdf-syntax-ns	http://www.w3.org/1999/02/22-rdf-syntax-ns#
ns.attribution.com	/ads/1.0/	http://ns.attribution.com/ads/1.0/
ns.adobe.com	/pdf/1.3/	http://ns.adobe.com/pdf/1.3/
ns.adobe.com	/xap/1.0/	http://ns.adobe.com/xap/1.0/
www.tiktok.com	/trending/	https://www.tiktok.com/trending/
jquery.com	-	https://jquery.com/
sizzlejs.com	-	https://sizzlejs.com/
jquery.org	/license	https://jquery.org/license
github.com	/whatwg/html/issues/2369	https://github.com/whatwg/html/issues/2369
html.spec.whatwg.org	-	https://html.spec.whatwg.org/#nonce-attributes

Showing 1 to 10 of 70 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


2.3.3.3	IPv4	-
2.3.3.1	IPv4	-

3.0 out of 5 · 2 most recent reviews

Text reviews

Positive

Negative

It is mobile tiktok but you can't log in to your account anywhere so not too good.

Bryan Stark·16 Aug 2021

I like it, it is what it says it is. I am logged in on my browser and it automatically logged in on the extension really like that. But you can't change your profile and bio. Another annoying thing is it doesn't sync up with your actual account. But I don't know maybe you don't like having to many tabs open so you use this. Not very different from using the website! :(

King Saturn·11 Aug 2021

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

TikTok™ Mobile

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 4 Versions4

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews