Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Zoom it

CRITICAL RISKRemoved from Chrome Web Store

Zoom it

ID: mgccclinjajhpeiciiaflagddlhcillp

Could be malicious

Supported Languages

🇧🇩Bengali

🇧🇷Brazilian Portuguese

🇬🇧British English

🇧🇬Bulgarian

🇪🇸Catalan

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

🇭🇷Croatian

🇨🇿Czech

🇩🇰Danish

🇳🇱Dutch

🇺🇸English

🇪🇪Estonian

🇵🇭Filipino

🇫🇮Finnish

🇫🇷French

🇩🇪German

🇬🇷Greek

🇮🇳Gujarati

🇮🇳Hindi

🇭🇺Hungarian

🇮🇩Indonesian

🇮🇹Italian

🇯🇵Japanese

🇰🇷Korean

🇱🇻Latvian

🇱🇹Lithuanian

🇲🇾Malay

🇮🇳Malayalam

🇮🇳Marathi

🇳🇴Norwegian

🇵🇱Polish

🇵🇹Portuguese

🇷🇴Romanian

🇷🇺Russian

🇷🇸Serbian

🇸🇰Slovak

🇸🇮Slovenian

🇪🇸Spanish

🇸🇪Swedish

🇮🇳Tamil

🇮🇳Telugu

🇹🇭Thai

🇹🇷Turkish

🇺🇸US English

🇻🇳Vietnamese

Extension Info & Metadata

Status

Removed

Version

1.21.0

Size

0.21 MB

Rating

2.4/5

Reviews

Users

123,360

Type

Extension

Updated

Apr 2, 2021

Publisher Contextual Analysis

Author: Rebecca DuncanView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

123,360

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

More control over browser zoom

Zoom It allows you to manage zoom options more precisely. ➤ Set zoom to exact number of percents ➤ Apply settings for a single site or globally ➤ Save options across devices

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical2

High1

Medium0

Low0

Versions scanned

Showing 1 of 4 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.10.2 Code review	3

Extension Version	Code Review Findings
1.10.2	3

Files with findings

2 distinct paths — top paths by unique finding count:

background.js2
manifest.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Remote Code Loading	critical	background.js (line 3876)	Dynamically injects a remote script from Google Tag Manager container GTM-56F88H5 into the extension's background page. GTM containers can deliver arbitrary JavaScript payloads — whoever controls this GTM account can …	1.10.2
2	Remote Code Loading	critical	manifest.json (line 28)	The CSP was deliberately relaxed from the MV2 default ('self' only) to whitelist googletagmanager.com, google-analytics.com, and googleapis.com. This is a purposeful modification enabling the remote GTM script injecti…	1.10.2
3	Obfuscation	high	background.js (line 1)	The entire 3,874-line Lodash 4.17.15 library is included verbatim in background.js purely to pad the file and bury the malicious GTM injection at line 3876. The core extension functionality (startZoom.js, resetZoom.js…	1.10.2

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


developer.mozilla.org	/docs/Mozilla/Add-ons/WebExtensions/API/runtime/onMessage	https://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/runtime/onMessage
npms.io	/search	https://npms.io/search?q=ponyfill.
d0	/ping/b0/dom.json	https://d0/ping/b0/dom.json
jquery.com	-	https://jquery.com/
sizzlejs.com	-	https://sizzlejs.com/
jquery.org	/license	https://jquery.org/license
github.com	/whatwg/html/issues/2369	https://github.com/whatwg/html/issues/2369
html.spec.whatwg.org	-	https://html.spec.whatwg.org/#nonce-attributes
js.foundation	-	https://js.foundation/
jsperf.com	/thor-indexof-vs-for/5	https://jsperf.com/thor-indexof-vs-for/5

Showing 1 to 10 of 70 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


2.3.3.3	IPv4	-
2.3.3.1	IPv4	-

2.4 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Does exactly what I want: gives me global and domain-level access to the zoom percentage, allowing a default.

Josh Mills·28 Jun 2021

perfect for displaying images in large size

GERARDB·17 Jun 2021

For me it works after I save the zoom level to the domain and refresh, but it advertises the ability to zoom by an exact zoom level. However, it skips from 89 to 92%, with no way of manually specifying 90%. I guess its just a percent off but still, kind of a bad design. It should have a text field instead of two buttons, if you are trying to advertise "precise" zooming.

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Zoom it

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 4 Versions3

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews