Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: TouchEn 확장프로그램

CRITICAL RISKRemoved from Chrome Web Store

TouchEn 확장프로그램

ID: gkdodgbccnhahcihaiakdkdfhchiahnf

Could be malicious

Supported Languages

🇰🇷Korean

Extension Info & Metadata

Status

Removed

Version

1.0.1.15

Size

0.02 MB

Rating

2.1/5

Reviews

180

Users

400,000

Type

Extension

Updated

Feb 11, 2018

Publisher Contextual Analysis

Trusted

Author: 라온시큐어View Profile
Privacy: Privacy Policy
Country: KR
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Address: 서울특별시 영등포구 여의대로 108 파크원타워2 47-48(여의도동) 영등포구, 서울특별시 07335 KR
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

8,400,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

브라우저에서 개인정보 입력을 보호하기 위한 라온시큐어의 PC보안 확장프로그램입니다.

인터넷 상에서 발생하는 개인정보를 안전하게 보호하고, 중요 금융거래 및 서비스의 안전한 사용을 제공하기 위한 확장 프로그램입니다. 라온시큐어 PC 보안 확장의 보안 범위 - 중요 입력 정보 보호 : 물리적인 키보드입력을 통해 사용자가 입력하는 중요한 정보를 외부의 위협으로부터 안전하게 보호하고 전송하는 보안 프로그램 - 온라인 방화벽 : 외부의 위협으로부터 PC를 안전하게 보호하는 온라인 방화벽 기능, 악성코드 탐지 및 치료를 진행하는 백신 프로그램 - 인증서 관리 : PC에 저장 된 공인인증서를 모바일 기기로 원격이동하는 관리 프로그램

User Growth

Showing data from Jan 01, 2022 to Sep 21, 2022

Versions

No change in user count

Compared to 3 months ago

1 version released in this period

Rating Count

Total: 180 ratings

Average Rating

Current: 2.14 / 5.0-0.03

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical2

High3

Medium0

Low0

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.0.1.15 Code review	5

Extension Version	Code Review Findings
1.0.1.15	5

Files with findings

2 distinct paths — top paths by unique finding count:

background.js3
contentscript.js2

S.No.	Category	Severity	File	Summary	Found in Version
1	Privilege Escalation	critical	contentscript.js (line 5)	The content script injects a `<script>` element directly into the host page's DOM, which executes in the page's own JavaScript context and attaches `window.touchenex_nativecall` as a globally accessible function. This…	1.0.1.15
2	Privilege Escalation	critical	contentscript.js (line 139)	The content script listens for custom DOM events fired by page-injected script and blindly forwards the message payload—deserialized from a DOM attribute without validation—directly to `chrome.runtime.sendMessage`. Th…	1.0.1.15
3	Code Injection	high	background.js (line 9)	On installation, the extension programmatically injects `contentscript.js` into every currently-open tab via `chrome.tabs.executeScript`, then dispatches a `__touchenex_extension_installed__` event into every frame. T…	1.0.1.15
4	Network Interception	high	background.js (line 60)	The background script acts as an unrestricted bidirectional relay between any content script (and thus any web page, via the injected bridge) and the native host process `kr.co.raon.touchenex`. Messages from the nativ…	1.0.1.15
5	Unauthorized Data Collection	high	background.js (line 210)	Every time a tracked tab navigates to a new URL, the full URL is forwarded to the locally-installed native application via `nativeMessaging` (`tab.url` in the `"move"` arg). Combined with the `tabs` permission and the…	1.0.1.15

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


*	/*	http:///
*	/*	https:///
clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
www.raonsecure.com	-	https://www.raonsecure.com

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


1.0.1.15	IPv4	-

1.0 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

�� 어디가서 설치라라는 건지?

정

정의파·23 Jun 2022

�� 어디가서 설��라라는 건지?

정

정의파·23 Jun 2022

도대체 어디가서 설치라라는 건지?

정

정의파·23 Jun 2022

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

TouchEn 확장프로그램

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 1 Version5

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating