Tracked campaign: SearchJack second wave

Our analysis confirmed the behaviour described in the threat library entry. Read the analysis and indicators →

Also reported by malext.io

Chrome Web Store

Bubbly Search

by [email protected] · 30.0K users
b781821f-bb66-5d51-bdab-aaacc3b60042 | v1.0.0
20/ 100
LOW risk
Threat verdict
Do not install

Confirmed member of a tracked malicious supply-chain campaign.

Analysis record

Analysed
1 months ago
Version
v1.0.0
Artifact
SHA256 7B1…AFA
Source
Findings (non-IoC)

Evidence ledger

Ranked by severity · findings with a source location link to the code viewer

1 detail row

YARA Rule Matches

1 rule
SeverityRuleHitsFilesMetadata
LOWpostinstall crypto operations 1
_metadata/verified_contents.json
-

Publisher Evidence

Limited evidence

[email protected]

Publisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.

Chrome does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.

35
Noisy-finding weight
x1.00
Publisher domain
No domain
Missing
Store verification signal
Limited signal
Limited
Extension portfolio
2
Portfolio

12 evidence rows available.

Finding Categories

3
IoC Indicators

YARA Rules Matched

1 rule
postinstall crypto operations

Security Analysis Summary

Security Analysis Overview

Bubbly Search is a Chrome Web Store extension published by [email protected]. Version 1.0.0 has been analyzed by the Risky Plugins security platform, receiving a risk score of 20.08/100 (LOW risk) based on 4 security findings.

Risk Assessment

This extension presents low security risk. Some minor findings were detected, but nothing that would prevent typical usage. Reviewing the detailed findings below is recommended before use in sensitive environments.

Findings Breakdown

  • Medium: 3 finding(s)
  • Low: 1 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Bubbly Search is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 30K users.

Recommendation

Based on the automated security analysis, this extension appears safe for general use. As with any extension, users should review the requested permissions before installation.

About This Extension

Bubbly Search - Your Gateway to Smarter Searching Transform your browsing experience with Bubbly Search. Experience a clean, efficient, and delightful way to search the web, powered by Yahoo. Key Features: - Lightning-fast search results - Clean, distraction-free interface - Seamless integration with Chrome - Quick access with the 'bubble' keyword - Privacy-focused search experience Perfect For: - Users who value efficiency and simplicity - Minimalists seeking a clean search experience - Anyone looking to enhance their Chrome workflow - Bubbly New Tab users seeking a complete experience How to Use: 1. Install the extension 2. Type 'bubble' followed by your search term in the address bar 3. Or simply use your address bar as usual - we're here when you need us! Privacy First: Your privacy matters. We don't track personal information or search history, ensuring a secure and private search experience. Why Choose Bubbly Search: - Fast and relevant results from Yahoo's powerful search engine - Seamless Chrome integration - Dedicated customer support

Frequently Asked Questions