Anyone ever tried this.

Discussion in 'other anti-virus software' started by bigc73542, Jan 1, 2018.

  1. bigc73542

    bigc73542 Retired Moderator

    Joined:
    Sep 21, 2003
    Posts:
    23,934
    Location:
    SW. Oklahoma
  2. Peter2150

    Peter2150 Global Moderator

    Joined:
    Sep 20, 2003
    Posts:
    20,590
    Good question.
     
  3. Mr.X

    Mr.X Registered Member

    Joined:
    Aug 10, 2013
    Posts:
    4,788
    Location:
    .
    :eek: Really? Installing an extension without describing it's actually an extension?

    http://sendvid.com/2p3ujeoz

    No available on Chrome Web Store.
    No https site.
    :cautious:
     
    Last edited by a moderator: Jan 1, 2018
  4. Peter2150

    Peter2150 Global Moderator

    Joined:
    Sep 20, 2003
    Posts:
    20,590
    Well question answered. I'll pass
     
  5. Trooper

    Trooper Registered Member

    Joined:
    Jan 26, 2005
    Posts:
    5,501
    Yup, same here.
     
  6. roger_m

    roger_m Registered Member

    Joined:
    Jan 25, 2009
    Posts:
    8,627
    A quick Google search revealed no information about this, so I installed it in Firefox, just to take a look. This is the page that opens when you click on its icon. Note the multiple references to "ransmoware," lol.

    SecuryCloud.png

    Its not clear exactly how it works. Anyway I'm about to remove it.

    It is available and installs from the Chrome store.
    https://chrome.google.com/webstore/detail/securycloud/idjfkeglmnclmpmjcgojjgpfafeoeapm

    I use Chrome Store Foxified to install Chrome extensions in Firefox.
    https://www.ghacks.net/2016/05/23/install-google-chrome-extensions-firefox/
     
  7. BG20001

    BG20001 Registered Member

    Joined:
    Jan 1, 2018
    Posts:
    1
    Location:
    DC
    Is there an analogous software to that does work to proactively protect your information?
     
  8. m0unds

    m0unds Registered Member

    Joined:
    Nov 12, 2015
    Posts:
    219
    that extension seems to do the following:

    1. assigns your endpoint (browser) a specific trackable guid (identifier)
    2. snags your chrome version number
    3. snags a list of your installed extensions (date/time installed, status, etc)
    4. sends the guid, chrome version and list of extensions to their API

    their api doesn't use hsts or rewriting to direct their api calls to https, so i was able to modify the unpacked extension to not use https, allowing me to capture traffic w/wireshark. i loaded up the unpacked extension into my vm's test browser and verified that all it does is send the stuff i mentioned to them. their api returns no result or confirmation, so it doesn't appear to do anything useful at all.

    edit: additionally, the chrome store's listing for it has a handful of reviews that appear to have been seeded by the developers - the review users' photos are stock headshot photos and the reviews have similar misspellings to those in the extension, lol.

    i certainly wouldn't install it.
     
    Last edited: Jan 1, 2018
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.