← Campaigns

YesCaptcha

YesCaptcha Assistant (90,000+ users) reads every HTTP(S) page, captures visible screenshots, and sends cookies to vendor API endpoints via an all_urls permission and fetch with credentials, a risk-by-design data flow without hidden credential theft.

Extensions
1
Stores
Chrome
Updated
2026-10-03
Disclosed
2025-01-08
Last observed
2026-10-09

Member extensions

1 extension
Campaign member extensions and their current risk
ExtensionStoreReported versionsCurrent risk
YesCaptcha assistantjiofmdifioeejeilfkpegipdjiopieklChromeNot specified0MINIMAL

Indicators

Download STIX →
Browse 4 indicators
TypeValue & evidence
domainapi.yescaptcha.comVendor API endpoint receiving captcha challenges
domainplugin-api.yescaptcha.comContent script endpoint
domaindev.yescaptcha.comDevelopment endpoint referenced in code
idjiofmdifioeejeilfkpegipdjiopieklChrome Web Store extension ID

Research & sources

Read the investigation →