Tracked campaign: searchjacked

Our analysis confirmed the behaviour described in the threat library entry. Read the analysis and indicators →

Also reported by socket.dev

Chrome Web Store

Brisk

by [email protected] · 2.0K users · 4.7 rating
b5b9dc41-4a11-53fd-af94-db480d2285fb | v1.0.3
52/ 100
MEDIUM risk
Threat verdict
Do not install

Confirmed member of a tracked malicious supply-chain campaign.

Analysis record

Analysed
3 months ago
Version
v1.0.3
Artifact
SHA256 8C0…A4B
Source
Findings (non-IoC)

Evidence ledger

Ranked by severity · findings with a source location link to the code viewer

2 detail rows

Publisher Evidence

Limited evidence

[email protected]

Publisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.

Chrome does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.

24
Noisy-finding weight
x1.00
Publisher domain
No domain
Missing
Store verification signal
Limited signal
Limited
Extension portfolio
1
Portfolio

13 evidence rows available.

Finding Categories

1
Network
71
IoC Indicators

Requested Permissions

6 permissions
history

Read and modify your browsing history

High
tabs
Medium
bookmarks
Medium
storage
Low
*://brisk-tab.com/*
Low
https://api.weatherapi.com/v1/
Low

Security Analysis Summary

Security Analysis Overview

Brisk is a Chrome Web Store extension published by [email protected]. Version 1.0.3 has been analyzed by the Risky Plugins security platform, receiving a risk score of 52.47/100 (MEDIUM risk) based on 73 security findings.

Risk Assessment

This extension presents moderate security risk. Several findings were detected that may warrant attention. Users should carefully review the permissions and findings before installation.

Findings Breakdown

  • Medium: 73 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Brisk is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 2K users.

Recommendation

Exercise caution with this extension. Review the detailed findings and ensure the requested permissions align with the extension's stated functionality before installation.

About This Extension

Brisk tab is a fun and dynamic new tab extension for your browser. With Brisk tab, you can customize your new tab page and achieve a completely new look of your browser. By clicking "Add to Chrome", you accept and agree to installing the Brisk Tab extension and setting Chrome™ new tab to that provided by the service and the Terms of Use and Privacy Policy. The extension will update your search settings and will change your search engine to be powered by Bing. Imagine having a browser personalized just for you. With Brisk Tab, you can have that. Here, everything is customizable. You can move around tab features, remove them or place them wherever you want. This product is created to help you get motivated and more productive whether you are doing school work or a job; if you are starting a business or starting your own company. The key to success is organization. Brisk tab allows you to organize everything just like you find best. Have your own touch on your laptop or computer. If there is anything you want to find out more about this product visit these links: - https://brisk-tab.com/ (official site is cool 😎) - https://brisk-tab.com/privacy-policy.html - https://brisk-tab.com/eula.html - https://brisk-tab.com/#contact

Frequently Asked Questions