Tracked campaign: Gameograf / Ovkas wallpaper adware

Our analysis confirmed the behaviour described in the threat library entry. Read the analysis and indicators →

Also reported by raw.githubusercontent.com

Chrome Web Store

Michael Jackson Cursor 999

44107ed9-10fd-542b-aaa3-bcb681c126b9 | v1.1.0
53/ 100
MEDIUM risk
Threat verdict
Do not install

Confirmed member of a tracked malicious supply-chain campaign.

Analysis record

Analysed
4 days ago
Version
v1.1.0
Artifact
SHA256 A50…622
Source
Findings (non-IoC)

Evidence ledger

Ranked by severity · findings with a source location link to the code viewer

16 detail rows

YARA Rule Matches

7 rules
SeverityRuleHitsFilesMetadata
LOWpostinstall persistence mechanism 1
background.js
-
LOWpostinstall crypto operations 1
_metadata/verified_contents.json
-
LOWpostinstall file manipulation 3
popup/popup.jscontent/content.jsbackground.js
-
LOWpostinstall obfuscation 3
popup/popup.jspopup/popup.htmllib/render.js
-
LOWpostinstall network communication 1
content/content.js
-
LOWpostinstall system command 2
popup/popup.cssbackground.js
-
LOWpostinstall file download 2
lib/render.jslib/catalog.js
-

Publisher Evidence

Limited evidence

[email protected]

Publisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.

Chrome does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.

30
Noisy-finding weight
x1.00
Publisher domain
No domain
Missing
Store verification signal
Limited signal
Limited
Extension portfolio
5
Portfolio

12 evidence rows available.

Finding Categories

3
Network
6
IoC Indicators

YARA Rules Matched

7 rules(13 hits)
postinstall persistence mechanism postinstall crypto operations postinstall file manipulation postinstall obfuscation postinstall network communication postinstall system command postinstall file download

Requested Permissions

3 permissions
<all_urls>

Access and modify data on every website you visit

Dangerous
storage
Low
scripting
Low

Security Analysis Summary

Security Analysis Overview

Michael Jackson Cursor 999 is a Chrome Web Store extension published by [email protected]. Version 1.1.0 has been analyzed by the Risky Plugins security platform, receiving a risk score of 52.69/100 (MEDIUM risk) based on 22 security findings.

Risk Assessment

This extension presents moderate security risk. Several findings were detected that may warrant attention. Users should carefully review the permissions and findings before installation.

Findings Breakdown

  • Medium: 9 finding(s)
  • Low: 13 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Michael Jackson Cursor 999 is published by [email protected] on the Chrome Web Store marketplace.

Recommendation

Exercise caution with this extension. Review the detailed findings and ensure the requested permissions align with the extension's stated functionality before installation.

About This Extension

Michael Jackson Cursor 999 – Custom Mouse Cursors Bring the King of Pop to your browser with Michael Jackson Cursor 999! 🎤🕺 Transform your ordinary mouse cursor with unique designs inspired by Michael Jackson, his iconic dance moves, legendary performances, and unforgettable style. Customize your browsing experience with creative cursors celebrating one of the most influential entertainers in music history. 🎉 WELCOME TO GAMEOGRAF! When you install Michael Jackson Cursor 999, the Gameograf.com website opens in a new tab, where you can explore gaming, wallpapers, and digital entertainment. 🎤 FEATURES 17 Cursor Designs: Explore a collection of Michael Jackson-inspired cursor designs featuring iconic poses, signature dance moves, and creative graphics. Animated GIF Cursors: Enjoy moving GIF cursors that bring Michael Jackson's legendary style to your browsing experience. Adjustable Cursor Size: Customize your cursor size from 16 to 128 pixels. Easy Cursor Selection: Open the extension popup and select your favorite design with a single click. Quick On and Off Control: Enable or disable your custom cursor whenever you want. Website-Specific Controls: Disable your custom cursor on individual websites while keeping it enabled on others. Keyboard Shortcut: Quickly toggle your custom cursor using Alt + Shift + C. Saved Preferences: Your cursor selection, size, and website preferences are stored locally in your browser. 🖱️ HOW TO USE Install Michael Jackson Cursor 999 from the Chrome Web Store. Gameograf.com opens in a new tab after installation. Click the extension icon in your Chrome toolbar. Browse the available cursor designs and choose your favorite. Adjust the cursor size to suit your preferences. Enable or disable your custom cursor whenever you want. 🌟 CELEBRATE THE KING OF POP From iconic dance moves to legendary stage performances, Michael Jackson left an unforgettable mark on music and pop culture. Now you can bring that inspiration to your everyday browsing with custom mouse cursors dedicated to his unique style. Choose your favorite design, enjoy animated GIF cursors, and give your browser a Michael Jackson-inspired look! 🔒 SIMPLE AND CONVENIENT Your cursor preferences are stored locally using Chrome's storage. No account is required to select and customize your cursor. ⚠️ IMPORTANT COMPATIBILITY INFORMATION Chrome restricts extensions from changing the cursor on certain browser pages, including Chrome Web Store pages and internal Chrome pages such as Settings and Downloads. If the cursor does not appear on a website that was already open when you installed the extension, refresh the page and try again. Bring the King of Pop to your cursor with Michael Jackson Cursor 999! 🎶

Frequently Asked Questions