CRX aminer

Starting analysis...

Extension icon

Norton Family

Version 3.9.0.17 View in Chrome Web Store

Last scanned: 13 days ago | force re-scan

Extension Details

Rating: 2.5 ★ (274 ratings)
Users: 30,000

Context-Aware Verdict

CRITICAL
Overall Risk
Trust Factors:

Norton Family is developed by NorTech Engineering, a legitimate company that creates parental control software. The extension has 30,000 users, indicating some market adoption. However, the concerning 2.5-star rating from 274 reviews suggests significant user dissatisfaction, which could indicate functionality issues or overly intrusive behavior that impacts user experience.

Concerns:

The extension's permissions are extremely broad and invasive, even for a parental control tool. The combination of tabs, webNavigation, and all_urls host permissions creates a comprehensive surveillance capability that can monitor every aspect of web browsing. The declarativeNetRequest permission allows it to block or modify network requests, while scripting permission with broad content script injection means it can execute code on any website. This level of access, while potentially necessary for parental controls, creates significant privacy and security risks if the extension is compromised or misused.

Recommendations:

Given the critical risk level, run this extension in a completely separate Chrome profile dedicated solely to parental control purposes. Regularly review the extension's activity through Chrome's extension management tools. Consider alternative parental control solutions that operate at the router or device level rather than browser level to reduce attack surface. If you must use this extension, ensure it's only installed on devices where parental monitoring is explicitly intended and understood by users.

Findings

HIGH
Broad Content Script Injection
This extension can inject scripts into any website. This means it could potentially read sensitive data, modify website content, or steal credentials.
HIGH
Broad Host Permissions
This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.
HIGH
High-Risk Permission: tabs
This extension has the tabs permission. Can access browser tab information and manipulate tabs. This could potentially be used maliciously to compromise security or privacy.
HIGH
High-Risk Permission: webNavigation
This extension has the webNavigation permission. Can track your web navigation. This could potentially be used maliciously to compromise security or privacy.