Tracked campaign: Zentos malware

Our analysis confirmed the behaviour described in the threat library entry. Do not install it. Read the analysis and indicators →

Also reported by malext.io

Chrome Web Store Verified

ZentOs

1bfebc70-0f27-5f25-981a-b0ba0cc28b0f | v0.2.51

Marketplace listing not found

Our last marketplace check could not find this listing in Chrome Web Store. It may have been removed or delisted. Existing installs may still run, but verify the publisher and package source before installing or updating.

Not found on Today
0/ 100
MINIMAL risk
Threat verdict
Do not install

Confirmed member of a tracked malicious supply-chain campaign.

Analysis record

Analysed
3 months ago
Version
v0.2.51
Artifact
SHA256 479…4A3
Source
Findings (non-IoC)

No Findings

All security checks passed

Publisher Evidence

Limited evidence

[email protected]

Publisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.

Chrome does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.

28
Noisy-finding weight
x1.00
Publisher domain
zentos.xyz
Observed
Store verification signal
Limited signal
Limited
Extension portfolio
1
Portfolio

13 evidence rows available.

No Threats Detected

This extension passed all security checks

Security Analysis Summary

Security Analysis Overview

ZentOs is a Chrome Web Store extension published by [email protected]. Version 0.2.51 has been analyzed by the Risky Plugins security platform, receiving a risk score of 0/100 (MINIMAL risk) based on 0 security findings.

Risk Assessment

This extension presents minimal security concerns. The automated analysis found very few or no issues, suggesting it is suitable for general use.

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

ZentOs is published by [email protected] on the Chrome Web Store marketplace.

Recommendation

Based on the automated security analysis, this extension appears safe for general use. As with any extension, users should review the requested permissions before installation.

About This Extension

ZentOs – Your Go-To Wallet for Ethereum & EVM Chains ZentOs is an open-source crypto wallet designed for Ethereum and EVM-compatible networks, built to deliver a fast, secure, and seamless DeFi experience directly in your browser. Why choose ZentOs? Built for DeFi users – Enjoy a smooth multi-chain experience across Ethereum and EVM networks. Enhanced security – Protect your assets with smart pre-transaction risk checks before you sign. Full transparency – Preview your upcoming balance changes before confirming any transaction. Take control of your crypto with confidence. Get ZentOs and start your DeFi journey today.

Frequently Asked Questions