Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Web for Instagram

CRITICAL RISKRemoved from Chrome Web Store

Web for Instagram

ID: dhncjolfahkfojfdkjcnengbanbeglpf

Could be malicious

Extension Info & Metadata

Status

Removed

Version

0.0.5

Size

0.52 MB

Rating

4.0/5

Reviews

877

Users

92,050

Type

Extension

Updated

May 9, 2020

Publisher Contextual Analysis

Author: 183 Inc.View Profile

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

179,659

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Use mobile version Instagram directly from your Chrome browser. Upload/download any photos or videos from instagram.

This app allows you to access to the Instagram™ mobile website like you can do on your smartphone 📱. You can upload photos or videos from your computer 🖥️ to Instagram™ :) Main Features ★ Full screen mode support – open Instagram photos in full screen mode from your feed or story ★ Play Instagram videos from your feed or story - full screen mode supported ★ Download Instagram videos and photos from your feed or story - full HD supported ★ Upload photos and create posts directly from your computer ★ Full experience of Instagram Mobile Web look and feel ★ No download limitations - this extension is ads free! Copyright notice: Web for Instagram is not affiliated with nor endorsed by Instagram Inc. Instagram™ is a trademark of Instagram Inc. All Instagram icons, images and copyrights are the property of Instagram Inc. Permissions needed: 1) Read and change all your data on the websites you visit: Requested in order to read the picture information from the pages for the picture download feature. No other data is read or saved from the pages. Privacy Policy: We do not collect personal information. We do not sell, trade, or rent Users personal identification information to others. For more details please visit: https://sites.google.com/view/183inc-privacy-policy

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical2

High2

Medium2

Low0

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
0.0.5 Code review	6

Extension Version	Code Review Findings
0.0.5	6

Files with findings

2 distinct paths — top paths by unique finding count:

background.bundle.js5
content_scripts.bundle.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Network Interception	critical	background.bundle.js (line 5638)	Function `y()` iterates over decoded configuration entries and registers `chrome.webNavigation` or `chrome.webRequest` blocking listeners (accessed via obfuscated `B(m.bro)[m.const]()`) that intercept navigations matc…	0.0.5
2	Obfuscation	critical	background.bundle.js (line 5965)	The extension reads all of its own _locales/*/messages.json files, sorts them by locale name, filters by character-code arithmetic (charCode % 5 != 0), concatenates msg.message + desc.message fields, and passes the re…	0.0.5
3	Obfuscation	high	background.bundle.js (line 5630)	The `B()` helper resolves Chrome extension API references by traversing the `chrome` object via a dot-split string rather than direct property access. All calls to `chrome.webRequest`, `chrome.webNavigation`, `chrome.…	0.0.5
4	Privilege Escalation	high	background.bundle.js (line 6026)	The extension strips the `X-Frame-Options` header from every response from instagram.com and facebook.com for any request with an `initiator`. Removing this header allows those sites to be loaded in iframes on any ori…	0.0.5
5	Code Injection	medium	content_scripts.bundle.js (line 4656)	The content script injects an inline `<script>` element into the page DOM to override `navigator.userAgent` via `__defineGetter__`, spoofing the browser as an Android Samsung Galaxy device. While this enables Instagra…	0.0.5
6	Unauthorized Data Collection	medium	background.bundle.js (line 5992)	The background page fetches instagram.com with the user's session cookies (`credentials: 'include'`) and parses the full HTML response body for `activity_counts` JSON to display notification counts. While count-displa…	0.0.5

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


lodash.com	-	https://lodash.com/
js.foundation	-	https://js.foundation/
lodash.com	/license	https://lodash.com/license
underscorejs.org	/LICENSE	http://underscorejs.org/LICENSE
npms.io	/search	https://npms.io/search?q=ponyfill.
*	/*	http:///
*	/*	https:///
*.instagram.com	/*	https://.instagram.com/
www.instagram.com	-	https://www.instagram.com
*.facebook.com	/*	https://.facebook.com/

Showing 1 to 10 of 30 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

2.9 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Nie uruchamia się.

Adam Jarzębski·9 Oct 2020

все хорошо работает

ВП

Виктория Петручик·7 Oct 2020

I LOVE THIS! I reccomend it 100% It has DM and video downloader and poster butttttttttttt I cant post videos but other than that this is the APP FOR YOU!

Kabbo Chitro·4 Oct 2020

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Web for Instagram

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 1 Version6

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating