[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

CFCA CryptoKit.PSBCUBank Extension

Version 3.4.0.2 View in Chrome Web Store

Last scanned: about 6 hours ago

Extension Details

Rating: 0.0 ★

Users: 9

Context-Aware Verdict

HIGH

Overall Risk

Trust Factors:

The extension has extremely limited trust indicators with only 9 users, no rating, and no identifiable author or developer information. While it appears to be associated with PSBC-UBank (a legitimate banking institution) based on its name and host permissions, the lack of transparency around the developer raises significant concerns. The extension's purpose seems to be cryptographic functionality for banking operations, which is inherently sensitive.

Concerns:

- Native messaging permission allows direct communication with local applications, creating potential attack vectors

- Very low user adoption (9 users) suggests either a new, untested extension or one with limited legitimate use

- Complete absence of developer information makes it impossible to verify authenticity

- Access to banking domains combined with native messaging creates high-risk scenarios for financial data compromise

- The cryptographic nature of the extension means it likely handles sensitive authentication or transaction data

Recommendations:

Given the high-risk nature of this extension, avoid installation unless you can verify its legitimacy directly with PSBC-UBank. If you must use it, run it in a completely separate Chrome profile isolated from your other browsing activities. Contact PSBC-UBank directly to confirm this extension is officially supported and obtain it through their recommended channels. Monitor your banking accounts closely if you choose to proceed with installation.

Findings

HIGH

Broad Host Permissions

This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.

MEDIUM

Access to Sensitive Domains

This extension requests access to sensitive domains: https://*.psbc-ubank.com/*, http://*.psbc-ubank.com/*. Ensure you trust this extension with access to these sites.

Raw Manifest

{
  "name": "CFCA CryptoKit.PSBCUBank Extension",
  "icons": {
    "16": "icon-16.png",
    "48": "icon-48.png",
    "128": "icon-128.png"
  },
  "action": {
    "default_icon": {
      "16": "icon-16.png",
      "48": "icon-48.png",
      "128": "icon-128.png"
    }
  },
  "author": "CFCA",
  "version": "3.4.0.2",
  "background": {
    "service_worker": "eventPage.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "CFCA Security Application Development Kit",
  "permissions": [
    "nativeMessaging"
  ],
  "host_permissions": [
    "https://*.psbc-ubank.com/*",
    "http://*.psbc-ubank.com/*"
  ],
  "manifest_version": 3,
  "externally_connectable": {
    "matches": [
      "https://*.psbc-ubank.com/*",
      "http://*.psbc-ubank.com/*"
    ]
  },
  "minimum_chrome_version": "88"
}

by ✦ Astarte

CFCA CryptoKit.PSBCUBank Extension

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Host Permissions:

Embedded URLs (1 total):

Raw Manifest

Detections

Manifest Findings