Tracked campaign: Gameograf / Ovkas wallpaper adware

Our analysis confirmed the behaviour described in the threat library entry. Read the analysis and indicators →

Also reported by raw.githubusercontent.com

Chrome Web Store Verified

Lo-Fi Music Room

by [email protected] · 27 users
ab8b4a8e-4eb9-58e1-8c13-4f78381f212d | v1.1.2
0/ 100
MINIMAL risk
-51 since v1.1.1
51 → 0 · false positives removed
Threat verdict
Do not install

Confirmed member of a tracked malicious supply-chain campaign.

Analysis record

Analysed
1 weeks ago
Version
v1.1.2
Artifact
SHA256 C60…ADD
Source
Findings (non-IoC)

Evidence ledger

Ranked by severity · findings with a source location link to the code viewer

53 detail rows

YARA Rule Matches

10 rules
SeverityRuleHitsFilesMetadata
LOWpostinstall persistence mechanism 1
js/background.js
-
LOWpostinstall file manipulation 14
js/script.jsjs/countdownTimer.jsjs/popup.js +11 more
-
LOWpostinstall crypto operations 4
js/jquery-3.7.1.min.jsimg/bg.mp4_metadata/verified_contents.json +1 more
-
LOWpostinstall network communication 7
js/script.jsnewtab.htmljs/jquery-3.7.1.min.js +4 more
-
LOWpostinstall obfuscation 5
newtab.htmljs/jquery-3.7.1.min.jsjs/sidePanel.js +2 more
-
LOWpostinstall system command 2
js/jquery-3.7.1.min.jsimg/bg.mp4
-
LOWpostinstall file download 6
js/weather.jsjs/script.jsjs/popup.js +3 more
-
LOWSQLInjection 3
js/jquery-3.7.1.min.jsjs/script.jsjs/todo.js
-
LOWNoUseWeakRandom 2
js/createStickyNote.jsjs/jquery-3.7.1.min.js
-
LOWLocalStorageShouldNotBeUsed 3
js/createStickyNote.jsjs/script.jsjs/todo.js
-

Publisher Evidence

Limited evidence

[email protected]

Publisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.

Chrome does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.

51
Noisy-finding weight
x1.00
Publisher domain
gameograf.com
Observed
Store verification signal
Limited signal
Limited
Extension portfolio
1.6K
Portfolio

11 evidence rows available.

Finding Categories

6
Network

YARA Rules Matched

10 rules(47 hits)
postinstall persistence mechanism postinstall file manipulation postinstall crypto operations postinstall network communication postinstall obfuscation postinstall system command postinstall file download SQLInjection NoUseWeakRandom LocalStorageShouldNotBeUsed

Requested Permissions

4 permissions
search
Low
alarms
Low
storage
Low
https://api.gameograf.com/*
Low

Security Analysis Summary

Security Analysis Overview

Lo-Fi Music Room is a Chrome Web Store extension published by [email protected]. Version 1.1.2 has been analyzed by the Risky Plugins security platform, receiving a risk score of 0/100 (MINIMAL risk) based on 0 security findings.

Risk Assessment

This extension presents minimal security concerns. The automated analysis found very few or no issues, suggesting it is suitable for general use.

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Lo-Fi Music Room is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 27 users.

Recommendation

Based on the automated security analysis, this extension appears safe for general use. As with any extension, users should review the requested permissions before installation.

About This Extension

Lo-Fi Music Room invites you into a cozy atmosphere filled with calming visuals of beautifully designed rooms where musical instruments await discovery. As you browse, enjoy the captivating cinematic looping animation that echoes the game's serene theme and rhythmic challenges. This extension is perfect for those who appreciate the unique blend of music and ambiance that Lo-Fi Music Room offers, transforming your new tabs into a peaceful retreat. Extension Features 🎞 Lo-Fi Music Room Video – Dynamic HD looped live wallpaper. 🔗 Popular Shortcuts – Quick access to YouTube, Netflix, ChatGPT, Amazon, and more. 🞞 Custom Shortcuts – Add your favorite websites for instant access. 🔍 Search Bar – Works seamlessly with your default search engine. 🕒 Clock & Date – Minimalist, always-on time & date widget. 📝 Sticky Notes – Colorful, draggable notes on your new tab. 🔔 Notifications – Get alerts about new wallpapers & features. 📧 Google Apps – One-click access to Gmail, Maps, Drive, and more. 🤖 ChatGPT Widget – Ask questions and get instant AI-powered answers. ✅ To-Do List – Organize your daily tasks directly on your new tab. 📅 Calendar Tool – Keep track of important dates. 🧮 Calculator – Perform calculations without leaving Chrome. ⏳ Timer – Built-in countdown for productivity or breaks. 🛠 More Tools – Includes privacy settings, uninstall guide, and support. About Us Gameograf.com develops premium Chrome new tab themes designed for anime, gaming, cars, celebrities, sports, and more. Enjoy visually stunning and immersive browsing experiences with every extension. 🌐 Website: https://gameograf.com 📩 Contact: https://gameograf.com/contact-us/ 🔒 Privacy Policy: https://gameograf.com/privacy-policy/ 💬 Feedback: https://gameograf.com/feedback/ 📧 Email: [email protected] Affiliate Policy Notice This extension opens a new tab at https://gameograf.com. Some links on our website including Amazon links may contain affiliate tracking. If you purchase through these links, Gameograf.com may earn a small commission, helping us maintain and improve our free extensions.

Frequently Asked Questions