Tracked campaign: Gameograf / Ovkas wallpaper adware

Our analysis confirmed the behaviour described in the threat library entry. Read the analysis and indicators →

Also reported by raw.githubusercontent.com

Chrome Web Store

Sasuke Uchiha Neon BMW M4 Naruto Live Wallpaper

by [email protected] · 228 users
55298518-79ca-5a07-a70e-bea849a53ec3 | v4.4.3

Marketplace listing not found

Our last marketplace check could not find this listing in Chrome Web Store. It may have been removed or delisted. Existing installs may still run, but verify the publisher and package source before installing or updating.

Not found on Today
0/ 100
MINIMAL risk
Threat verdict
Do not install

Confirmed member of a tracked malicious supply-chain campaign.

Analysis record

Analysed
7 months ago
Version
v4.4.3
Artifact
SHA256 BDF…030
Source
Findings (non-IoC)

No Findings

All security checks passed

Publisher Evidence

Limited evidence

[email protected]

Publisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.

Chrome does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.

43
Noisy-finding weight
x1.00
Publisher domain
No domain
Missing
Store verification signal
Limited signal
Limited
Extension portfolio
735
Portfolio

11 evidence rows available.

No Threats Detected

This extension passed all security checks

AI Security Report

AI Security Review

Evidence context: threat category none; evidence quality weak.

The CVEQ analysis of 'Sasuke Uchiha Neon BMW M4 Naruto Live Wallpaper' (UUID: 55298518-79ca-5a07-a70e-bea849a53ec3) returned zero findings across all security categories. The findings_summary explicitly shows 0 IoCs, 0 malware signatures, 0 network findings, 0 obfuscation indicators, and 0 code-smell detections. This clean result is significant because the CVEQ platform typically flags extensions with even minor anomalies.

The extension description indicates it provides anime-themed live wallpapers featuring 'Sasuke Uchiha with BMW M4 neon power,' which aligns with the extension name. This is a content-focused extension rather than one with system-level capabilities. The developer is listed as '[email protected]' — an anonymous email address rather than a verified company or developer account. While anonymous publishing is a weak risk signal, it is common for hobbyist extensions and does not constitute evidence of malicious intent.

No suspicious domains appear in the IoC findings. The findings_by_category object is empty, meaning the static analysis found no external network connections to unknown services, no credential access patterns, and no browser hijacking mechanisms. The extension has 73 users, which is low but not inherently suspicious for a niche anime-themed wallpaper extension.

The strongest counterargument to this verdict is that zero findings could indicate incomplete analysis rather than genuine cleanliness. A skeptic might argue that the CVEQ analysis failed to properly scan the extension files, leaving potential threats undetected. However, the findings_summary structure shows all categories were evaluated (ioc, malware-signature, malware, manifest-analysis, network, obfuscation, dependency, secret, code-smell, tool-poisoning), and each returned 0 rather than being absent from the report. This suggests the analysis completed successfully but found no security concerns. If the analysis had failed, the data would likely show missing fields or error states rather than explicit zero counts across all categories.

Another potential concern is the version number (4.4.3), which suggests multiple updates over time. However, without malware signatures or obfuscation findings, version iteration alone does not indicate malicious activity. The extension's purpose (live wallpapers) is benign, and the name does not mimic any known popular extension, ruling out typosquatting.

Given the complete absence of security findings, the extension should be treated as a false positive from CVEQ's initial triage. No action is required beyond standard monitoring.

Key Reasons

  • Zero findings in all security categories
  • No malware signatures or obfuscation detected
  • Extension name is descriptive without typosquatting indicators
  • No suspicious network domains in IoC findings

False Positive Considerations

  • Zero security findings across all analysis categories
  • Extension name is descriptive and not impersonating known software
  • No suspicious domains or network indicators detected

Reviewed 2026-05-07; recommended action: suppress false positive; model confidence 85%.

About This Extension

Step into a powerful fusion of anime intensity and modern performance with Sasuke Uchiha from Naruto alongside the sleek BMW M4. Known for his cold determination, incredible abilities, and iconic Sharingan, Sasuke brings a dark and commanding presence to this high-energy scene. This live wallpaper captures Sasuke standing beside a neon-lit BMW M4, surrounded by a cinematic atmosphere that blends street racing aesthetics with powerful anime energy. The glowing neon lights, sharp visuals, and intense mood create a striking experience every time you open a new tab. Perfect for Naruto fans, car enthusiasts, and anyone who enjoys the combination of legendary anime characters with high-performance vehicles. Features 🚗 BMW M4 themed car + anime live wallpaper 🔴 Sasuke Uchiha inspired anime atmosphere ⚡ Dynamic visuals blending neon street style with anime power 🖱️ Shortcut links, date and time on the new tab 🔗 Quick access site shortcuts 🔍 It searches using the search engine selected by the user 📌 Provided more extension 🚀 Fuel Your Screen with Action-Packed Anime & High-Speed Rides! 🚀 From anime heroes to legendary cars and iconic worlds, Ovkas.com delivers premium live wallpapers designed to transform your Chrome new tab into an immersive visual experience. 💥 Want even more? Head to the Chrome Web Store, type "ovkas", and explore more anime, gaming, and aesthetic live wallpapers. ✨ Visit Ovkas.com and bring your digital world to life today! ✨ Google Chrome Affiliate Program Disclosure This extension, when installed, opens the ovkas.com website in your new tab to provide information about the downloaded extension. It is designed to enhance user experience, offer access to similar extensions, and help users create their own. The extension may contain links to specific services or products per policy. All redirects are designed for user benefit and require consent before any action is taken.

Frequently Asked Questions