Tracked campaign: Gameograf / Ovkas wallpaper adware

Our analysis confirmed the behaviour described in the threat library entry. Read the analysis and indicators →

Also reported by raw.githubusercontent.com

Chrome Web Store

Kasane Teto Live Wallpaper

by [email protected] · 1.0K users · 5.0 rating
67a2425e-74e6-521b-a274-e87698d36b78 | v14.4.1
34/ 100
LOW risk
Threat verdict
Do not install

Confirmed member of a tracked malicious supply-chain campaign.

Analysis record

Analysed
3 months ago
Version
v14.4.1
Artifact
SHA256 DE7…5B5
Source
Findings (non-IoC)

Network indicator detail is shown below

347 aggregate findings were counted. 347 network indicators contributed to the aggregate finding count.

Publisher Evidence

Limited evidence

[email protected]

Publisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.

Chrome does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.

39
Noisy-finding weight
x1.00
Publisher domain
No domain
Missing
Store verification signal
Limited signal
Limited
Extension portfolio
22
Portfolio

12 evidence rows available.

Finding Categories

347
IoC Indicators

Requested Permissions

1 permission
search
Low

Security Analysis Summary

Security Analysis Overview

Kasane Teto Live Wallpaper is a Chrome Web Store extension published by [email protected]. Version 14.4.1 has been analyzed by the Risky Plugins security platform, receiving a risk score of 33.85/100 (LOW risk) based on 347 security findings.

Risk Assessment

This extension presents low security risk. Some minor findings were detected, but nothing that would prevent typical usage. Reviewing the detailed findings below is recommended before use in sensitive environments.

Findings Breakdown

  • Medium: 347 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Kasane Teto Live Wallpaper is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 1K users.

Recommendation

Exercise caution with this extension. Review the detailed findings and ensure the requested permissions align with the extension's stated functionality before installation.

About This Extension

Kasane Teto Live Wallpaper brings the vibrant world of vocaloid culture directly to your new tab, celebrating the beloved character with mesmerizing visuals. Fans of Kasane Teto appreciate her unique personality as well as her iconic design, which is beautifully captured in soothing, dynamic backgrounds that change with the seasons, invoking the essence of her character. The visual style of this extension features exquisite artwork that showcases Teto in various environments, blending her signature colors of teal and pastel hues with rich, immersive landscapes. The wallpapers create an inviting atmosphere that transforms your new tab into a lively space, filled with artistic elements inspired by her musical adventures and community spirit. The combination of soft gradients and animated effects elevates the aesthetic, appealing to both long-time fans and those newly introduced to the vocaloid phenomenon. Experience the enchanting live wallpaper with smooth transitions and gentle animations that breathe life into your browser. Enjoy interactive elements like shortcut links and real-time data, enhancing the user experience while surrounded by the charm of Kasane Teto. Features 🎞 Dynamic HD live wallpapers ✨ Smooth animations and visual effects 🖱️ Shortcut links, date and time on the new tab 🔗 Quick access site shortcuts 🔍 Uses the search engine selected by the user 📌 Includes additional useful extensions Discover more at gameograf.com, where you can explore an extensive selection of engaging extensions. Google Chrome Affiliate Program Disclosure This extension, when installed, opens the ovkas.com or gameograf.com website in your new tab to provide information about the downloaded extension. It is designed to enhance user experience, offer access to similar extensions, and help users create their own. The extension may contain links to specific services or products per policy. All redirects are designed for user benefit and require consent before any action is taken.

Frequently Asked Questions