CRX aminer
[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Starting analysis...

Extension icon

Surf Security 5

Version 1.4.256 View in Chrome Web Store

Last scanned: 2 months ago | force re-scan

Extension Details

Rating: 3.5 ★
Users: 2,000

Context-Aware Verdict

CRITICAL
Overall Risk
Trust Factors:

The extension has concerning trust indicators with only 2,000 users and a modest 3.5-star rating. The lack of visible developer information and company details raises additional red flags. The name "Surf Security 5" suggests it's a security tool, but the extensive permissions far exceed what most legitimate security extensions require.

Concerns:

The extension requests an excessive number of high-risk permissions that create significant security vulnerabilities. The combination of proxy control, web request interception, cookie access, and broad host permissions (<all_urls>) essentially gives this extension complete control over your browsing experience. The management permission allowing control over other extensions is particularly concerning, as is the identity permission accessing personal information. The unsafe WebAssembly execution policy could hide malicious code. For a security extension with only 2,000 users, these permissions are disproportionately invasive and unnecessary.

Recommendations:

Do not install this extension. If already installed, remove it immediately. The permission set suggests potential malware or a compromised extension rather than legitimate security software. If you need security functionality, choose well-established extensions from reputable companies with millions of users and transparent privacy policies. The combination of low user count, broad permissions, and security-focused branding is a common pattern in malicious extensions designed to steal data or compromise systems.

Findings

HIGH
Broad Host Permissions
This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.
HIGH
High-Risk Permission: cookies
This extension has the cookies permission. Can access and modify browser cookies. This could potentially be used maliciously to compromise security or privacy.
HIGH
High-Risk Permission: downloads
This extension has the downloads permission. Can download files and access download history. This could potentially be used maliciously to compromise security or privacy.
HIGH
High-Risk Permission: identity
This extension has the identity permission. Can access your identity information. This could potentially be used maliciously to compromise security or privacy.
HIGH
High-Risk Permission: management
This extension has the management permission. Can manage other extensions. This could potentially be used maliciously to compromise security or privacy.
HIGH
High-Risk Permission: proxy
This extension has the proxy permission. Can control proxy settings. This could potentially be used maliciously to compromise security or privacy.
HIGH
High-Risk Permission: tabs
This extension has the tabs permission. Can access browser tab information and manipulate tabs. This could potentially be used maliciously to compromise security or privacy.
HIGH
High-Risk Permission: webNavigation
This extension has the webNavigation permission. Can track your web navigation. This could potentially be used maliciously to compromise security or privacy.
HIGH
High-Risk Permission: webRequest
This extension has the webRequest permission. Can intercept and modify web requests. This could potentially be used maliciously to compromise security or privacy.
HIGH
Unsafe WebAssembly Execution
This extension's Content Security Policy allows 'wasm-unsafe-eval', which permits potentially dangerous WebAssembly code execution. This could be used to hide malicious code or perform CPU-intensive operations.
MEDIUM
Medium-Risk Permission: activeTab
This extension has the activeTab permission. Can access the active tab when clicking the extension icon.
MEDIUM
Medium-Risk Permission: notifications
This extension has the notifications permission. Can show notifications.
MEDIUM
Medium-Risk Permission: storage
This extension has the storage permission. Can store data locally.
MEDIUM
Medium-Risk Permission: unlimitedStorage
This extension has the unlimitedStorage permission. Can store unlimited data locally.
by ✦ Astarte