Tracked campaign: Gameograf / Ovkas wallpaper adware

Our analysis confirmed the behaviour described in the threat library entry. Read the analysis and indicators →

Also reported by raw.githubusercontent.com

Chrome Web Store

Gojo Satoru JJK Blue Eyes Live Wallpaper

by [email protected] · 60 users
cfcaf121-3d4a-5fed-ac4d-826fa502ec9f | v1.4.1
38/ 100
LOW risk
Threat verdict
Do not install

Confirmed member of a tracked malicious supply-chain campaign.

Analysis record

Analysed
2 months ago
Version
v1.4.1
Artifact
SHA256 E5A…C00
Source
Findings (non-IoC)

Evidence ledger

Ranked by severity · findings with a source location link to the code viewer

19 detail rows

YARA Rule Matches

9 rules
SeverityRuleHitsFilesMetadata
LOWpostinstall file download 1
img/bg.mp4
-
LOWSQLInjection 2
script.jsjquery-3.7.1.min.js
-
LOWNoUseWeakRandom 2
script.jsjquery-3.7.1.min.js
-
LOWpostinstall crypto operations 3
img/bg.mp4jquery-3.7.1.min.js_metadata/verified_contents.json
-
LOWpostinstall file manipulation 3
script.jsjquery-3.7.1.min.jsstyle.css
-
LOWpostinstall obfuscation 2
img/bg.mp4jquery-3.7.1.min.js
-
LOWpostinstall network communication 3
img/bg.mp4index.htmljquery-3.7.1.min.js
-
LOWpostinstall system command 2
img/bg.mp4jquery-3.7.1.min.js
-
LOWLocalStorageShouldNotBeUsed 1
script.js
-

Publisher Evidence

Limited evidence

[email protected]

Publisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.

Chrome does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.

39
Noisy-finding weight
x1.00
Publisher domain
No domain
Missing
Store verification signal
Limited signal
Limited
Extension portfolio
20
Portfolio

12 evidence rows available.

Finding Categories

34
IoC Indicators

YARA Rules Matched

9 rules(19 hits)
postinstall file download SQLInjection NoUseWeakRandom postinstall crypto operations postinstall file manipulation postinstall obfuscation postinstall network communication postinstall system command LocalStorageShouldNotBeUsed

Requested Permissions

1 permission
search
Low

Security Analysis Summary

Security Analysis Overview

Gojo Satoru JJK Blue Eyes Live Wallpaper is a Chrome Web Store extension published by [email protected]. Version 1.4.1 has been analyzed by the Risky Plugins security platform, receiving a risk score of 38.38/100 (LOW risk) based on 53 security findings.

Risk Assessment

This extension presents low security risk. Some minor findings were detected, but nothing that would prevent typical usage. Reviewing the detailed findings below is recommended before use in sensitive environments.

Findings Breakdown

  • Medium: 34 finding(s)
  • Low: 19 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Gojo Satoru JJK Blue Eyes Live Wallpaper is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 60 users.

Recommendation

Exercise caution with this extension. Review the detailed findings and ensure the requested permissions align with the extension's stated functionality before installation.

About This Extension

Elevate your browser experience with Gojo Satoru JJK Blue Eyes Live Wallpaper, where the stunning artistry of Jujutsu Kaisen comes alive on your new tab. Fans can immerse themselves in the captivating world of Gojo Satoru, highlighted by his striking blue eyes and commanding presence. This live wallpaper features a vibrant color palette that brings out the intensity and depth of Gojo's character. The dynamic visuals incorporate iconic symbols and scenes from the series, creating a perfect blend of action and artistry that resonates with fans. The fluid animations not only enhance the overall aesthetic but also evoke the energy of the anime, allowing users to feel as though they are stepping into Gojo's realm. Experience the thrill of Jujutsu Kaisen every time you open a new tab. The wallpaper transports you to an atmosphere brimming with excitement, featuring detailed illustrations that showcase Gojo’s strength and charm, making each interaction uniquely engaging. Features 🎞 Dynamic HD live wallpapers ✨ Smooth animations and visual effects 🖱️ Shortcut links, date and time on the new tab 🔗 Quick access site shortcuts 🔍 Uses the search engine selected by the user 📌 Includes additional useful extensions For more engaging content, explore gameograf.com to enhance your browsing experience even further. Google Chrome Affiliate Program Disclosure This extension, when installed, opens the ovkas.com or gameograf.com website in your new tab to provide information about the downloaded extension. It is designed to enhance user experience, offer access to similar extensions, and help users create their own. The extension may contain links to specific services or products per policy. All redirects are designed for user benefit and require consent before any action is taken.

Frequently Asked Questions