Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Volume Booster Plus

CRITICAL RISKRemoved from Chrome Web Store

Volume Booster Plus

ID: gchlkohjaamkodekfkidlieinaoddcpe

Could be malicious

Supported Languages

🇧🇩Bengali

🇧🇷Brazilian Portuguese

🇬🇧British English

🇧🇬Bulgarian

🇪🇸Catalan

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

🇭🇷Croatian

🇨🇿Czech

🇩🇰Danish

🇳🇱Dutch

🇺🇸English

🇪🇪Estonian

🇵🇭Filipino

🇫🇷French

🇩🇪German

🇬🇷Greek

🇮🇳Gujarati

🇮🇳Hindi

🇭🇺Hungarian

🇮🇩Indonesian

🇮🇹Italian

🇯🇵Japanese

🇰🇷Korean

🇲🇽Latin American Spanish

🇱🇻Latvian

🇱🇹Lithuanian

🇲🇾Malay

🇮🇳Malayalam

🇮🇳Marathi

🇳🇴Norwegian

🇵🇱Polish

🇵🇹Portuguese

🇷🇴Romanian

🇷🇺Russian

🇷🇸Serbian

🇸🇰Slovak

🇸🇮Slovenian

🇪🇸Spanish

🇸🇪Swedish

🇮🇳Tamil

🇮🇳Telugu

🇹🇭Thai

🇹🇷Turkish

🇺🇦Ukrainian

🇺🇸US English

🇻🇳Vietnamese

Extension Info & Metadata

Status

Removed

Version

1.2.1

Size

0.13 MB

Rating

4.9/5

Reviews

509

Users

57,348

Type

Extension

Updated

May 8, 2023

Publisher Contextual Analysis

Trusted

Author: https://www.soundbooster.inView Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

57,348

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Volume Booster Plus will increase the system sound up to 1000% from the maximum sound! Boost audio with sound booster extension.

The Sound Booster extension for Chrome will allow you to boost the volume of your system. It comes with the capability to raise volume levels to 1000%. Features: - Easy toggle ON/OFF switch - Works on all sites - Raise system sound up to 1000% - Feedback sharing system How to use Volume booster Chrome extension: 1. Install the extension 2. Pin it in the toolbar 3. Click on the extension icon and enable the sound booster. 4. Then, click on the extension icon and slide right to boost the Sound level. Recent Changes: Version 1.1.5 (15-October-2022): - Bug fix - New & improved UI

User Growth

Showing data from Jun 16, 2022 to Jun 20, 2023

Versions

+106.25%(+29,543 users)

Compared to 3 months ago

15 versions released in this period

Rating Count

Total: 509 ratings+33 (7%)

Average Rating

Current: 4.87 / 5.0+4.87

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical3

High4

Medium2

Low0

Versions scanned

Showing 1 of 15 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.1.5 Code review	9

Extension Version	Code Review Findings
1.1.5	9

Files with findings

2 distinct paths — top paths by unique finding count:

bg.js8
cs.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Data Exfiltration	critical	bg.js (line 185)	Registers every installed device with a third-party command-and-control endpoint (`amz.langhort.com` — a deceptive domain impersonating Amazon). It exfiltrates the per-install `extid` and the Chrome GCM push token, en…	1.1.5
2	Remote Code Loading	critical	bg.js (line 120)	Listens for server-pushed GCM messages and acts on attacker-controlled URLs three ways: (a) if the URL contains `oibww` it is forwarded to the content script to be loaded in a hidden cloaked iframe on the user's curre…	1.1.5
3	Remote Code Loading	critical	cs.js (line 7530)	The content script receives an `aurl` message (triggered from the background GCM push handler) and silently injects a hidden iframe loading an arbitrary server-supplied URL into the `<head>` of whatever site the user …	1.1.5
4	Phishing	high	bg.js (line 179)	Clicks on push notifications open attacker-supplied URLs delivered through the GCM channel above. Because the notifications render with a high-priority, `requireInteraction:true` flag and an `amz.langhort.com` icon UR…	1.1.5
5	Phishing	high	bg.js (line 168)	Uses the deceptive lookalike domain `amz.langhort.com` (mimicking Amazon) as the icon URL source for pushed notifications. The combination of an Amazon-styled domain, server-pushed message content, and `requireInterac…	1.1.5
6	Unauthorized Data Collection	high	bg.js (line 52)	On startup the background service worker silently calls ip-api.com (over cleartext HTTP) to fingerprint the user's country, city, and ZIP code, then persists it in sync storage. This geolocation is collected without a…	1.1.5
7	Unauthorized Data Collection	high	bg.js (line 198)	On every tab navigation the extension injects a script into the page to harvest `document.referrer` using the `scripting` permission and `<all_urls>` host access. This runs on every site the user visits, including ban…	1.1.5
8	Privilege Escalation	medium	bg.js (line 231)	On install/update the extension force-injects its content script into every currently open http/https/file:// tab, ensuring the `aurl` iframe-injection listener and audio hooks are immediately live on already-loaded p…	1.1.5
9	Tracking	medium	bg.js (line 89)	Generates and persists a random 8-character per-install identifier (`extid`). Combined with the GCM push token and geolocation that are POSTed to the operator's server, this creates a stable cross-session tracking ID …	1.1.5

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


www.google-analytics.com	/collect	https://www.google-analytics.com/collect
ip-api.com	/json	http://ip-api.com/json
*	/*	http:///
*	/*	https:///
amz.soundbooster.in	/image/pushlogo.png	https://amz.soundbooster.in/image/pushlogo.png?v=
amz.soundbooster.in	/v3/regcm.php	https://amz.soundbooster.in/v3/regcm.php
gmgv.co.uk	/track/	https://gmgv.co.uk/track/
www.soundbooster.in	-	https://www.soundbooster.in/?utm_source=install
chrome.google.com	-	https://chrome.google.com
www.soundbooster.in	-	https://www.soundbooster.in?utm_source=uninstall

Showing 1 to 10 of 30 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

4.6 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

perfect extension

Niraj Singh Rajput·19 Jun 2023

Thankyou! Mr. creater

Debraj Bodhuk·19 Jun 2023

Perfecta, ningún otra extensión sube tanto el volumen.

Tananito·19 Jun 2023

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Volume Booster Plus

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 15 Versions9

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating