Is "Cisco Web Communicator" on Chrome Web Store Safe to Install?
Enable Web applications integrated with Cisco Jabber voice and video to use the Cisco Web Communicator add-on. Install this extension to enable Cisco Jabber voice and video, or control of Cisco phones, from within Web applications integrated by Cisco partners or customers into Cisco Unified Communications environments. Used in conjunction with the Cisco Web Communicator add-on (provided separately after this extension is installed, or by your system administrator), this extension enables you to place and receive voice and video calls in your Chrome browser, or using an integrated Cisco phone on your desk. This extension supports Cisco Web Communicator 11.8.4.1 and later. For support, please use the support mechanism provided for the Web application providing integrated Cisco voice and video softphone, or phone control. IMPORTANT NOTICES AND DISCLAIMERS - PLEASE READ END USER LICENSE AGREEMENT Use of this Software is governed by the Cisco End User License Agreement. http://www.cisco.com/go/eula CISCO PRIVACY STATEMENT http://www.cisco.com/web/siteassets/legal/privacy_full.html STRONG ENCRYPTION NOTICE This product contains cryptographic features and is subject to United States and local country laws governing import, export, transfer and use. Delivery of Cisco cryptographic products does not imply third-party authority to import, export, distribute or use encryption. Importers, exporters, distributors and users are responsible for compliance with U.S. and local country laws. By using this product you agree to comply with applicable laws and regulations. If you are unable to comply with U.S. and local laws, return this product immediately. A summary of U.S. laws governing Cisco cryptographic products may be found at: http://www.cisco.com/wwl/export/crypto/tool/stqrg.html If you require further assistance concerning the exporting of these products, please contact us by sending email to [email protected]. COPYRIGHT NOTICE Copyright 2025 Cisco Systems, Inc. All Rights Reserved.
Risk Assessment
Analyzed38 security findings detected across all analyzers
Chrome extension requesting 2 permissions
Severity Breakdown
Finding Categories
YARA Rules Matched
5 rules(10 hits)Requested Permissions
2 permissionsExchange messages with programs outside the browser
Manage other installed extensions
About This Extension
Detailed Findings
12 totalYARA Rule Matches
5 rulesIndicators of Compromise
Network indicators, suspicious strings, and potential IoCs extracted during analysis
All Indicators · 26
detected Domain: msg.ciscosdkservermessage.name XIOC detected Domain: msg.ciscosdkservermessage.name
extracted_from_files
detected Domain: msg.ciscochannelservermessage.name XIOC detected Domain: msg.ciscochannelservermessage.name
extracted_from_files
detected Domain: msg.client.id XIOC detected Domain: msg.client.id
extracted_from_files
detected Domain: port.sender.id XIOC detected Domain: port.sender.id
extracted_from_files
detected Domain: chrome.management XIOC detected Domain: chrome.management
extracted_from_files
detected Domain: location.host XIOC detected Domain: location.host
extracted_from_files
detected Domain: ext.name XIOC detected Domain: ext.name
extracted_from_files
detected IP: 11.8.4.1 XIOC detected IP: 11.8.4.1
extracted_from_files
detected Domain: xhr.open XIOC detected Domain: xhr.open
extracted_from_files
detected Domain: port.client.id XIOC detected Domain: port.client.id
extracted_from_files
detected Domain: sdkmsg.ciscosdkservermessage.name XIOC detected Domain: sdkmsg.ciscosdkservermessage.name
extracted_from_files
detected Domain: msg.ciscochannelmessage.client.id XIOC detected Domain: msg.ciscochannelmessage.client.id
extracted_from_files
detected Domain: ciscochannelmessage.client.id XIOC detected Domain: ciscochannelmessage.client.id
extracted_from_files
detected Domain: com.cisco XIOC detected Domain: com.cisco
extracted_from_files
detected Domain: sender.client.name XIOC detected Domain: sender.client.name
extracted_from_files
detected Domain: msg.ciscosdkclientmessage.name XIOC detected Domain: msg.ciscosdkclientmessage.name
extracted_from_files
detected Domain: event.data.ciscosdkclientmessage.name XIOC detected Domain: event.data.ciscosdkclientmessage.name
extracted_from_files
detected Domain: chrome.runtime.id XIOC detected Domain: chrome.runtime.id
extracted_from_files
detected Domain: event.data XIOC detected Domain: event.data
extracted_from_files
detected Domain: evt.data XIOC detected Domain: evt.data
extracted_from_files
detected Domain: f.id XIOC detected Domain: f.id
extracted_from_files
detected URL: https://clients2.google.com/service/update2/crx XIOC detected URL: https://clients2.google.com/service/update2/crx
extracted_from_files
detected Domain: clients2.google.com XIOC detected Domain: clients2.google.com
extracted_from_files
detected Domain: rel.maj.min.build XIOC detected Domain: rel.maj.min.build
extracted_from_files
detected Domain: s.id XIOC detected Domain: s.id
extracted_from_files
detected Domain: client.name XIOC detected Domain: client.name
extracted_from_files
Security Analysis Summary
Security Analysis Overview
Cisco Web Communicator is a Chrome Web Store extension published by [email protected]. Version 11.8.4.1 has been analyzed by the Risky Plugins security platform, receiving a risk score of 56/100 (MEDIUM risk) based on 38 security findings.
Risk Assessment
This extension presents moderate security risk. Several findings were detected that may warrant attention. Users should carefully review the permissions and findings before installation.
Findings Breakdown
- High: 10 finding(s)
- Medium: 28 finding(s)
What Was Analyzed
The security assessment covers multiple analysis categories:
- Malware Detection: YARA rule matching against 2,400+ malware signatures
- Secret Detection: Scanning for exposed API keys, tokens, and credentials
- Static Analysis: Code-level security analysis for common vulnerability patterns
- Network Analysis: Detection of suspicious network communications and endpoints
- Obfuscation Detection: Identification of code obfuscation techniques
Developer Information
Cisco Web Communicator is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 9K users.
Recommendation
Exercise caution with this extension. Review the detailed findings and ensure the requested permissions align with the extension's stated functionality before installation.
Source Code Not Available
Source code is not available for this version of the extension.
Frequently Asked Questions
Similar Extensions
Related extensions from the same publisher or marketplace
Cisco Webex Extension
[email protected]
Call with Jabber
[email protected]
Call with Jabber
[email protected]
SensePage
[email protected]
Chat AI - Chat GPT 5 on all sites
[email protected]
Photos Downloader Pro for Facebook
[email protected]