CRX aminer
Extension icon

Tor Browser (Unofficial port for Chrome)

Version 6.1.3 View in Chrome Web Store

Last scanned: about 3 hours ago

Extension Details

Rating: 4.0 ★ (56 ratings)
Users: 20,000

Context-Aware Verdict

CRITICAL
Overall Risk
Trust Factors:

The extension has concerning trust indicators. With only 20,000 users and 56 ratings, it has limited adoption for such a significant privacy tool. The 4.0 rating is moderate but based on a small sample size. Most critically, this is an "unofficial port" of Tor Browser, meaning it's not developed or endorsed by the official Tor Project, which raises serious authenticity and security concerns. The lack of clear developer information further diminishes trustworthiness.

Concerns:

The extension's permission set is extremely powerful and concerning for an unofficial Tor implementation. The proxy permission allows complete control over network routing, while webRequest enables interception and modification of all web traffic. Combined with broad host permissions across all websites, this creates a perfect storm for potential data theft, traffic manipulation, or surveillance. The storage permission, while less critical, could be used to persist malicious configurations or stolen data.

Recommendations:

Do not install this extension. Instead, use the official Tor Browser from the Tor Project's website for legitimate privacy needs. If you've already installed it, remove it immediately and scan your system for malware. Unofficial privacy tools often defeat their stated purpose by introducing new security vulnerabilities. For Chrome-based privacy browsing, consider reputable VPN extensions from established companies or use Chrome's built-in privacy features instead.

Findings

HIGH
Broad Host Permissions
This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.
HIGH
High-Risk Permission: proxy
This extension has the proxy permission. Can control proxy settings. This could potentially be used maliciously to compromise security or privacy.
HIGH
High-Risk Permission: webRequest
This extension has the webRequest permission. Can intercept and modify web requests. This could potentially be used maliciously to compromise security or privacy.
MEDIUM
Medium-Risk Permission: storage
This extension has the storage permission. Can store data locally.