Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: UIDFB.COM - Lấy SĐT

CRITICAL RISKRemoved from Chrome Web Store

UIDFB.COM - Lấy SĐT

ID: bgeofnplekphjnhflejeeacdochakdil

Could be malicious

Supported Languages

🇻🇳Vietnamese

Extension Info & Metadata

Status

Removed

Version

10.3

Size

0.16 MB

Rating

3.7/5

Reviews

Users

10,000

Type

Extension

Updated

Dec 19, 2024

Publisher Contextual Analysis

Author: https://uidfb.comView Profile
Privacy: Privacy Policy
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

10,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

UIDFB.COM | Có SĐT chốt đơn dễ dàng hơn!

BẠN ĐANG BÁN HÀNG ONLINE? - Bạn bỏ chi phí quảng cáo fB ads mà không có sdt khách để gọi? - Bạn tư vấn, chat với khách cả tháng nhưng cũng không có sdt khách để gọi? - Một thống kê của Google khiến chúng ta giật mình: Cứ 100 khách hàng trên Fb thì có khoảng 5% khách hàng sẽ liên hệ với chúng ta. Vậy còn 95% khách hàng tiềm năng thì sao? - Làm sao để tiếp cận họ khi inbox họ không trả lời, chờ đợi họ đồng ý kết bạn? GIẢI PHÁP LẤY SĐT CỦA UIDFB Công nghệ của UIDFB hoạt động dựa trên nền tảng công nghệ Big Data hỗ trợ khách hàng lấy số điện thoại nhanh chóng của bất kỳ ai trên Fb. Tỷ lệ chính xác lên đến 95% kể cả số điện thoại ẩn trên profile. Hỗ trợ nhà bán hàng tối ưu được quy trình Telesale mạnh nhất hiện nay. BẠN có thể gọi điện tư vấn cho khách hàng ngay khi họ vừa conment, ấn Like, gửi inbox,.. thể hiện sự quan tâm tới bài quảng cáo. TIỆN ÍCH - Phần mềm tra cứu, tìm kiếm thông tin SĐT khách hàng tiềm năng trên fb - Tra cứu SĐT trên mọi Group, Fanpage, Profile - Tra cứu thông tin khách hàng trang của bạn và cả đối thủ - Tra cứu bất kì đâu, bất kì hình thức nào trên FB (comment, like, share, inbox) ------------ - Đăng ký tài khoản tại: UIDFB.COM - Bạn được tặng 50 lượt tra cứu đầu tiên. ChangeLog: + v10.3 - 19/12/2024 + v10.2 - 01/11/2024 + v10.1 - 21/05/2024 + v9.8 - 20/11/2023 ... + v1.48 - 22/01/2017

User Growth

Showing data from Jan 01, 2022 to Dec 31, 2022

Versions

No change in user count

Compared to 4 months ago

7 versions released in this period

Rating Count

Total: 21 ratings

Average Rating

Current: 3.67 / 5.0-0.33

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical4

High4

Medium1

Low0

Versions scanned

Showing 1 of 13 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
9.8 Code review	9

Extension Version	Code Review Findings
9.8	9

Files with findings

3 distinct paths — top paths by unique finding count:

scripts/background.js5
scripts/content.js3
scripts/mypopup.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Credential Theft	critical	scripts/background.js (line 52)	The content script reports every visited URL to the background page, which intercepts the Facebook OAuth `login_success.html` redirect to extract the user's `#access_token` fragment and silently exfiltrate it to the a…	9.8
2	Credential Theft	critical	scripts/mypopup.js (line 83)	Helper that takes a raw cookie string and writes each entry into `document.cookie` scoped to `.facebook.com` for 7 days, after navigating a tab to facebook.com. This is a session-injection primitive: an attacker-suppl…	9.8
3	Data Exfiltration	critical	scripts/background.js (line 163)	Sends the captured Facebook OAuth access token to `uidfb.com/api/Users/loginfb` and stores the resulting `authcode` for subsequent authenticated calls. The remote server retains a persistent grant against the user's F…	9.8
4	Unauthorized Data Collection	critical	scripts/background.js (line 90)	Every Facebook UID, display name, and the URL where it was scraped is sent to `uidfb.com/api/Users2/getTel` to retrieve a phone number. This is the core privacy-violating function: the extension exists to dox third-pa…	9.8
5	Network Interception	high	scripts/background.js (line 128)	Fetches Facebook profile pages via `mbasic.facebook.com/<username>/about` with `credentials: include`, riding on the user's authenticated Facebook session to scrape numeric UIDs from arbitrary vanity-URL profiles. Thi…	9.8
6	Tracking	high	scripts/content.js (line 831)	When the user scrolls past a Facebook "Sponsored" / advertising post, the extension automatically and silently fires a synthetic click on the post's comment button to load comment threads and harvest reply links. This…	9.8
7	Tracking	high	scripts/background.js (line 63)	Persistent server-side telemetry: the extension keeps an `authcode` bearer token and queries `uidfb.com` for `getInfo` and `getLastScan`, meaning the remote service maintains a per-user history of every Facebook UID/n…	9.8
8	Unauthorized Data Collection	high	scripts/content.js (line 401)	An 800ms-interval scanner walks every Facebook anchor link on the page, parsing UIDs/usernames and display names from comments, likes, shares, friend lists, hovercards and Messenger threads. Combined with the `getPhon…	9.8
9	Obfuscation	medium	scripts/content.js (line 263)	Source URLs are base64-encoded (`btoa`) before being attached as DOM attributes and later sent to `uidfb.com`. The encoding offers no security benefit and serves to obfuscate the exfiltrated source-link payload from c…	9.8

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


*.facebook.com	/*	https://.facebook.com/
*.messenger.com	/*	https://.messenger.com/
static.xx.fbcdn.net	/*	https://static.xx.fbcdn.net/*
*.fbcdn.net	-	https://*.fbcdn.net/
uidfb.com	/*	https://uidfb.com/*
clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
www.w3.org	/2000/svg	http://www.w3.org/2000/svg
www.w3.org	/1999/xlink	http://www.w3.org/1999/xlink
uidfb.com	/images/cal.png	https://uidfb.com/images/cal.png
uidfb.com	/admin/fb	https://uidfb.com/admin/fb?url=scan

Showing 1 to 10 of 50 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

3.4 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

ứng dụng k đăng nhập đc quá mất time

Anhcc·23 Nov 2024

Dùng không được

kfo dksai·28 Aug 2024

tốt

Dũng Trần Tuấn·12 Jun 2024

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

UIDFB.COM - Lấy SĐT

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 13 Versions9

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating