Tracked campaign: SearchJack second wave

Our analysis confirmed the behaviour described in the threat library entry. Read the analysis and indicators →

Also reported by malext.io

Chrome Web Store

Simple Search Pro

by [email protected]
5dafd182-9d48-5845-ae6c-c1da26e8d606 | v1.0.0.1
53/ 100
MEDIUM risk
Threat verdict
Do not install

Confirmed member of a tracked malicious supply-chain campaign.

Analysis record

Analysed
2 months ago
Version
v1.0.0.1
Artifact
SHA256 32C…0BF
Source
Findings (non-IoC)

Evidence ledger

Ranked by severity · findings with a source location link to the code viewer

2 detail rows

Publisher Evidence

Limited evidence

[email protected]

Publisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.

Chrome does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.

25
Noisy-finding weight
x1.00
Publisher domain
No domain
Missing
Store verification signal
Limited signal
Limited
Extension portfolio
2
Portfolio

12 evidence rows available.

Finding Categories

1
Obfuscation
1
Network
6
IoC Indicators

Requested Permissions

4 permissions
declarativeNetRequestWithHostAccess
Low
storage
Low
alarms
Low
*://simplesearchpro.co/*
Low

Security Analysis Summary

Security Analysis Overview

Simple Search Pro is a Chrome Web Store extension published by [email protected]. Version 1.0.0.1 has been analyzed by the Risky Plugins security platform, receiving a risk score of 52.69/100 (MEDIUM risk) based on 8 security findings.

Risk Assessment

This extension presents moderate security risk. Several findings were detected that may warrant attention. Users should carefully review the permissions and findings before installation.

Findings Breakdown

  • Medium: 8 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Simple Search Pro is published by [email protected] on the Chrome Web Store marketplace.

Recommendation

Exercise caution with this extension. Review the detailed findings and ensure the requested permissions align with the extension's stated functionality before installation.

About This Extension

Simple Search Pro sets your default search to a custom experience powered by Yahoo. It delivers fast, relevant, and easy-to-access results directly from your browser’s address bar, making everyday searches simple and consistent. Permissions: 1. Read and change your data on this product: This access is limited only to our domains and does not affect any other sites you visit. It helps us detect spam or misuse and ensures the product is tied to the correct user by linking usage data to its source. Overall, this improves functionality and the experience provided. 2. Change your search setting to simplesearchpro.co: This permission allows the product to set simplesearchpro.co as the default search engine in your address bar. This enables search results to be delivered directly via the product’s configuration. By clicking "Add to Chrome", you agree to install this extension and accept the Terms of Service and Privacy Policy. Chrome is a trademark of Google LLC. Use of it here does not imply any affiliation with or endorsement by its holder. Yahoo is a registered trademark of Yahoo Inc. Simple Search Pro is a product offered by Digital Network Associates Online Marketing Limited. Please review our full Privacy Policy for more detailed information on how we handle and safeguard your data. Privacy Policy: https://simplesearchpro.co/privacypolicy Terms of Service: https://simplesearchpro.co/termsofservice

Frequently Asked Questions

Similar Extensions

Related extensions from the same publisher or marketplace

ShopNSurf

[email protected]

LOW 6 users

Edge Translate - Browser Translator | PDF Translation | MV3 | Open Source

[email protected]

CRITICAL 312 users

SlingPlayer for DISH Anywhere

Unknown Developer

CRITICAL 10K users

Intelbras Cloud

[email protected]

CRITICAL 10K users

Edge Translate - Text Selection Translation

[email protected]

CRITICAL 1K users

MV3前端助手

[email protected]

CRITICAL 9 users