Anyone ever tried this.

Discussion in 'other anti-virus software' started by bigc73542, Jan 1, 2018.

  1. bigc73542

    bigc73542 Retired Moderator

  2. Peter2150

    Peter2150 Global Moderator

    Good question.
     
  3. Mr.X

    Mr.X Registered Member

    :eek: Really? Installing an extension without describing it's actually an extension?

    http://sendvid.com/2p3ujeoz

    No available on Chrome Web Store.
    No https site.
    :cautious:
     
    Last edited by a moderator: Jan 1, 2018
  4. Peter2150

    Peter2150 Global Moderator

    Well question answered. I'll pass
     
  5. Trooper

    Trooper Registered Member

    Yup, same here.
     
  6. roger_m

    roger_m Registered Member

    A quick Google search revealed no information about this, so I installed it in Firefox, just to take a look. This is the page that opens when you click on its icon. Note the multiple references to "ransmoware," lol.

    SecuryCloud.png

    Its not clear exactly how it works. Anyway I'm about to remove it.

    It is available and installs from the Chrome store.
    https://chrome.google.com/webstore/detail/securycloud/idjfkeglmnclmpmjcgojjgpfafeoeapm

    I use Chrome Store Foxified to install Chrome extensions in Firefox.
    https://www.ghacks.net/2016/05/23/install-google-chrome-extensions-firefox/
     
  7. BG20001

    BG20001 Registered Member

    Is there an analogous software to that does work to proactively protect your information?
     
  8. m0unds

    m0unds Registered Member

    that extension seems to do the following:

    1. assigns your endpoint (browser) a specific trackable guid (identifier)
    2. snags your chrome version number
    3. snags a list of your installed extensions (date/time installed, status, etc)
    4. sends the guid, chrome version and list of extensions to their API

    their api doesn't use hsts or rewriting to direct their api calls to https, so i was able to modify the unpacked extension to not use https, allowing me to capture traffic w/wireshark. i loaded up the unpacked extension into my vm's test browser and verified that all it does is send the stuff i mentioned to them. their api returns no result or confirmation, so it doesn't appear to do anything useful at all.

    edit: additionally, the chrome store's listing for it has a handful of reviews that appear to have been seeded by the developers - the review users' photos are stock headshot photos and the reviews have similar misspellings to those in the extension, lol.

    i certainly wouldn't install it.
     
    Last edited: Jan 1, 2018
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice