[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

CIBN Connect

Version 1.0.0.27 View in Chrome Web Store

Last scanned: about 2 hours ago

Extension Details

Rating: 5.0 ★ (4 ratings)

Users: 320

Context-Aware Verdict

HIGH

Overall Risk

Trust Factors:

The extension has very limited trust indicators with only 320 users and 4 ratings, making it difficult to assess community trust. The perfect 5.0 rating could indicate either genuine satisfaction or insufficient sample size. The lack of clear developer information and company details raises transparency concerns. The extension appears to target professional networking and video conferencing platforms, suggesting a business-focused use case.

Concerns:

The extension requests excessive permissions that seem disproportionate to typical networking tools. The downloads permission is particularly concerning as it allows file downloads and access to download history without clear justification. Cookie access across multiple domains creates significant privacy risks, especially on professional platforms like LinkedIn. The broad host permissions spanning numerous video conferencing and networking sites (LinkedIn, Zoom, Google Meet, Remo) suggest extensive data collection capabilities. The scripting permission combined with content script injection across all these platforms could enable comprehensive user activity monitoring.

Recommendations:

Given the high-risk profile, consider running this extension in a separate Chrome profile dedicated to professional activities only. Before installation, verify the extension's legitimacy through official channels or your organization's IT department. Monitor your account activities on LinkedIn and other platforms for any unusual behavior after installation. Consider whether the extension's functionality justifies the extensive permissions requested. If possible, seek alternative tools with more limited permission requirements for your networking needs.

Findings

HIGH

Broad Host Permissions

This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.

HIGH

High-Risk Permission: cookies

This extension has the cookies permission. Can access and modify browser cookies. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: downloads

This extension has the downloads permission. Can download files and access download history. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Access to Sensitive Domains

This extension requests access to sensitive domains: *://*.linkedin.com/*, *://meet.google.com/*. Ensure you trust this extension with access to these sites.

MEDIUM

Medium-Risk Permission: notifications

This extension has the notifications permission. Can show notifications.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

offscreen
storage
background
alarms
notifications
downloads
scripting
cookies

Host Permissions:

*://*.linkedin.com/*
*://*.gstatic.com/*
*://*.mymosttrusted.net/*
*://mymosttrusted.net/*
*://static-exp2.licdn.com/*
*://*.linkedlimits.com/*
*://meet.google.com/*
*://*.my-most-trusted.com/*
*://*.meetn.com/*
*://*.zoom.us/*
*://*.remo.co/*
*://*.beekonnected.com/*

Content Security Policy:

extension_pages: script-src 'self'; object-src 'self'; connect-src https://* wss://* data: blob: filesystem:; script-src-elem 'self' 'unsafe-inline' https://cdnjs.cloudflare.com/ https://fonts.googleapis.com/;

Embedded URLs (382 total):

https://angular.io/	https://angular.io/license
https://mymosttrusted.net/api	https://www.linkedin.com
https://mymosttrusted.net/api-v4/notification?invites=	https://www.mymosttrusted.net/profile/
https://mymosttrusted.net/uninstall/?id=	https://www.linkedin.com/in/
https://mymosttrusted.net	http://www.w3.org/2000/svg
https://fonts.googleapis.com/css?family=Source+Sans+Pro:300	https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.6.0/css/all.min.css
https://ckeditor.com/legal/ckeditor-oss-license	https://mths.be/utf8js
https://github.com/wernerm	https://github.com/Amine27
https://github.com/abdelsaid	https://github.com/forabi
https://github.com/noureddinem	https://github.com/nusretparlak
https://github.com/kikoanis	https://github.com/ElFadiliY
https://github.com/xsoh	https://github.com/naderio
https://github.com/topchiyev	https://github.com/demidov91
http://praleska.pro/	https://github.com/Oire
https://github.com/kraz	https://github.com/estellecomment
https://github.com/ashwoolford	https://github.com/kaushikgandhi
https://github.com/vajradog	https://github.com/jbleduigou
https://github.com/frontyard	https://github.com/juanghurtado
https://github.com/petrbela	https://github.com/mirontoli
https://github.com/robgallen	https://github.com/ryangreaves
https://github.com/mrbase	https://github.com/lluchs
https://github.com/MadMG	https://github.com/mik01aj
https://github.com/sschueller	https://github.com/jawish
https://github.com/mehiel	https://github.com/jarcoal
https://github.com/jonbca	https://github.com/chrisgedrim
https://github.com/chriscartlidge	https://github.com/jatinag22
https://github.com/lukemcgregor	https://github.com/techdimension
https://github.com/colindean	https://github.com/miestasmia
https://github.com/jcfranco	https://github.com/bustta
https://github.com/chrisrodz	https://github.com/julionc
https://github.com/madhenry	https://github.com/ragulka
https://github.com/eillarra	https://github.com/ebraminio
https://github.com/bleadof	https://github.com/hagmandan
https://github.com/matthewdeeco	https://github.com/ragnar123
https://github.com/sakarisson	https://github.com/gaspard
https://github.com/jfroffice	https://github.com/robin0van0der0v
https://github.com/askpt	https://github.com/jonashdown
https://github.com/WikiDiscoverer	https://github.com/Kaushik1987
https://github.com/tomer	https://github.com/DevelopmentIL
https://github.com/TalAter	https://github.com/mayanksinghal

Page 1 of 5

Raw Manifest

{
  "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIe4im7LbxdlF5UJD9LoB+8jrHesoKBMRonhq7QJssTq8mE7AjNFKrppxhUoG6fPcewKO1K1ShiSz8aMag7o9AvBH6u1/Ko3SoxmtSKKDdLUjY61rP7YGVFtg2o1x1WZZk65AgDuP6Ehv9Y7kDZAC1m5D4YmfxfcN15SOQGDl4EHrE1Z3itGKKE0UiM5XPjMn4aKxKe2CQuou2Wc5Ai66rRwD1n4bJIQfeHyAwbbiNPRFItFfgVoKxWe9tLTk90ezIJ05PixYz6IVEnMiStaECJ2tIehgmYIHSblfE5eu6BgvIosdXKbxaN2koz+MHukDYeIgNKmkRYP597S9XbSrQIDAQAB",
  "name": "CIBN Connect",
  "icons": {
    "16": "mmt-srcwl-mxkbrlcfeqtoecxf/icon16.png",
    "48": "mmt-srcwl-mxkbrlcfeqtoecxf/icon48.png",
    "96": "mmt-srcwl-mxkbrlcfeqtoecxf/icon96.png",
    "128": "mmt-srcwl-mxkbrlcfeqtoecxf/icon128.png",
    "256": "mmt-srcwl-mxkbrlcfeqtoecxf/icon256.png"
  },
  "action": {
    "default_icon": "mmt-srcwl-mxkbrlcfeqtoecxf/icon48.png",
    "default_tite": "CIBN Connect",
    "default_popup": "popup-mmt-srcwl-mxkbrlcfeqtoecxf.html"
  },
  "version": "1.0.0.27",
  "incognito": "split",
  "background": {
    "type": "module",
    "service_worker": "background.js"
  },
  "short_name": "cibnconnect",
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Modern networking meets AI to bring you warmed up leads, quality connections and filled events through LinkedIn collaborations.",
  "permissions": [
    "offscreen",
    "storage",
    "background",
    "alarms",
    "notifications",
    "downloads",
    "scripting",
    "cookies"
  ],
  "content_scripts": [
    {
      "js": [
        "mmt-srcwl-mxkbrlcfeqtoecxf/js/underscore.min.js",
        "mmt-srcwl-mxkbrlcfeqtoecxf/js/jquery.min.js",
        "js/limits-lift.js",
        "mmt-srcwl-mxkbrlcfeqtoecxf/js/jquery-ui.min.js",
        "mmt-srcwl-mxkbrlcfeqtoecxf/js/moment.min.js",
        "mmt-srcwl-mxkbrlcfeqtoecxf/js/bililite-range.js"
      ],
      "css": [
        "mmt-srcwl-mxkbrlcfeqtoecxf/css/no-print.css"
      ],
      "run_at": "document_start",
      "matches": [
        "*://*.linkedin.com/*",
        "*://*.meetn.com/*",
        "*://meet.google.com/*",
        "*://*.zoom.us/*",
        "*://*.remo.co/*",
        "*://*.my-most-trusted.com/*",
        "*://*.beekonnected.com/*",
        "*://mymosttrusted.net/*"
      ],
      "exclude_matches": [
        "*://mymosttrusted.net/tt-dba*"
      ]
    },
    {
      "js": [
        "js/content-miner-mmt-srcwl-mxkbrlcfeqtoecxf.js",
        "js/content-script-mmt-srcwl-mxkbrlcfeqtoecxf.js"
      ],
      "run_at": "document_start",
      "matches": [
        "*://*.linkedin.com/*"
      ]
    },
    {
      "js": [
        "js/meetn-mmt-srcwl-mxkbrlcfeqtoecxf.js"
      ],
      "run_at": "document_start",
      "matches": [
        "*://*.meetn.com/*",
        "*://*.beekonnected.com/meeting"
      ]
    },
    {
      "js": [
        "js/non-meeting-mmt-srcwl-mxkbrlcfeqtoecxf.js"
      ],
      "run_at": "document_start",
      "matches": [
        "*://*.beekonnected.com/*",
        "*://meet.google.com/*",
        "*://mymosttrusted.net/*",
        "*://*.my-most-trusted.com/*"
      ],
      "exclude_matches": [
        "*://*.beekonnected.com/meeting",
        "*://mymosttrusted.net/tt-dba*"
      ]
    },
    {
      "js": [
        "js/zoom-mmt-srcwl-mxkbrlcfeqtoecxf.js"
      ],
      "run_at": "document_start",
      "matches": [
        "*://*.zoom.us/*"
      ]
    },
    {
      "js": [
        "js/remo-mmt-srcwl-mxkbrlcfeqtoecxf.js"
      ],
      "run_at": "document_start",
      "matches": [
        "*://*.remo.co/*"
      ]
    },
    {
      "js": [
        "mmt-srcwl-mxkbrlcfeqtoecxf/js/sweetalert.min.js",
        "mmt-srcwl-mxkbrlcfeqtoecxf/js/webcomponent-loader.js",
        "mmt-srcwl-mxkbrlcfeqtoecxf/js/loadscript.js"
      ],
      "run_at": "document_idle",
      "matches": [
        "*://*.linkedin.com/*",
        "*://*.zoom.us/*",
        "*://*.remo.co/*",
        "*://*.my-most-trusted.com/*",
        "*://meet.google.com/*",
        "*://*.meetn.com/*",
        "*://*.beekonnected.com/*",
        "*://mymosttrusted.net/*"
      ],
      "exclude_matches": [
        "*://mymosttrusted.net/tt-dba*"
      ]
    }
  ],
  "host_permissions": [
    "*://*.linkedin.com/*",
    "*://*.gstatic.com/*",
    "*://*.mymosttrusted.net/*",
    "*://mymosttrusted.net/*",
    "*://static-exp2.licdn.com/*",
    "*://*.linkedlimits.com/*",
    "*://meet.google.com/*",
    "*://*.my-most-trusted.com/*",
    "*://*.meetn.com/*",
    "*://*.zoom.us/*",
    "*://*.remo.co/*",
    "*://*.beekonnected.com/*"
  ],
  "manifest_version": 3,
  "minimum_chrome_version": "93",
  "content_security_policy": {
    "extension_pages": "script-src 'self'; object-src 'self'; connect-src https://* wss://* data: blob: filesystem:; script-src-elem 'self' 'unsafe-inline' https://cdnjs.cloudflare.com/ https://fonts.googleapis.com/;"
  },
  "web_accessible_resources": [
    {
      "matches": [
        "*://*.linkedin.com/*",
        "*://*.meetn.com/*",
        "*://meet.google.com/*",
        "*://*.zoom.us/*",
        "*://*.remo.co/*",
        "*://*.my-most-trusted.com/*",
        "*://*.beekonnected.com/*",
        "*://mymosttrusted.net/*"
      ],
      "resources": [
        "mmt-srcwl-mxkbrlcfeqtoecxf/icon128.png",
        "mmt-srcwl-mxkbrlcfeqtoecxf/icon256.png",
        "popup-mmt-srcwl-mxkbrlcfeqtoecxf.html",
        "index-mmt-srcwl-mxkbrlcfeqtoecxf.html",
        "mmt-srcwl-mxkbrlcfeqtoecxf/css/linkedin.css",
        "mmt-srcwl-mxkbrlcfeqtoecxf/images/extension-tab.svg",
        "mmt-srcwl-mxkbrlcfeqtoecxf/images/tick.svg",
        "mmt-srcwl-mxkbrlcfeqtoecxf/images/close.svg",
        "mmt-srcwl-mxkbrlcfeqtoecxf/images/cross.svg",
        "mmt-srcwl-mxkbrlcfeqtoecxf/images/gradient-bg-md.svg",
        "mmt-srcwl-mxkbrlcfeqtoecxf/circle-logo-icon-white.png",
        "mmt-srcwl-mxkbrlcfeqtoecxf/logo-dark.png",
        "mmt-srcwl-mxkbrlcfeqtoecxf/icon.png",
        "mmt-srcwl-mxkbrlcfeqtoecxf/icon.png",
        "mmt-srcwl-mxkbrlcfeqtoecxf/circle-logo-icon.png",
        "mmt-srcwl-mxkbrlcfeqtoecxf/images/send-config.png",
        "mmt-srcwl-mxkbrlcfeqtoecxf/images/ios-arrow-down-white.svg",
        "mmt-srcwl-mxkbrlcfeqtoecxf/images/ios-arrow-up-white.svg",
        "mmt-srcwl-mxkbrlcfeqtoecxf/images/ios-add-circle-outline.svg",
        "mmt-srcwl-mxkbrlcfeqtoecxf/images/golden-thumb.png",
        "mmt-srcwl-mxkbrlcfeqtoecxf/images/refer-icon.svg",
        "mmt-srcwl-mxkbrlcfeqtoecxf/images/loading.svg",
        "mmt-srcwl-mxkbrlcfeqtoecxf/images/affiliate-icon.svg",
        "mmt-srcwl-mxkbrlcfeqtoecxf/images/linkedin-icon.svg",
        "mmt-srcwl-mxkbrlcfeqtoecxf/images/ios-thumbs-up.svg",
        "mmt-srcwl-mxkbrlcfeqtoecxf/images/ios-thumbs-down.svg",
        "mmt-srcwl-mxkbrlcfeqtoecxf/images/ios-arrow-down.svg",
        "mmt-srcwl-mxkbrlcfeqtoecxf/images/mmt-icons-02-logo.svg",
        "mmt-srcwl-mxkbrlcfeqtoecxf/images/mmt-icons-03-score.svg",
        "mmt-srcwl-mxkbrlcfeqtoecxf/images/mmt-icons-04-gold-recommend.svg",
        "mmt-srcwl-mxkbrlcfeqtoecxf/images/mmt-icons-05-introduction.svg",
        "mmt-srcwl-mxkbrlcfeqtoecxf/images/mmt-icons-06-personality.svg",
        "mmt-srcwl-mxkbrlcfeqtoecxf/images/mmt-icons-07-affiliate.svg",
        "mmt-srcwl-mxkbrlcfeqtoecxf/images/mmt-icons-08-view.svg",
        "mmt-srcwl-mxkbrlcfeqtoecxf/images/mmt-icons-09-askai.svg",
        "mmt-srcwl-mxkbrlcfeqtoecxf/images/mmt-icons-10-tag-modify.svg",
        "mmt-srcwl-mxkbrlcfeqtoecxf/images/mmt-icons-11-add-trusted.svg",
        "mmt-srcwl-mxkbrlcfeqtoecxf/js/main-dom.js"
      ]
    }
  ]
}

by ✦ Astarte

CIBN Connect

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Host Permissions:

Content Security Policy:

Embedded URLs (382 total):

Raw Manifest

Detections

Manifest Findings