Tracked campaign: Gameograf / Ovkas wallpaper adware

Our analysis confirmed the behaviour described in the threat library entry. Read the analysis and indicators →

Also reported by raw.githubusercontent.com

Chrome Web Store Verified

Jojo Dio Brando Gameograf

by [email protected] · 2.0K users · 5.0 rating
ea5ef632-6ce3-5f47-a3a0-995a5e7c6246 | v2.61
57/ 100
MEDIUM risk
+5 since v2.60
Threat verdict
Do not install

Confirmed member of a tracked malicious supply-chain campaign.

Analysis record

Analysed
6 days ago
Version
v2.61
Artifact
SHA256 A2E…48C
Source
Findings (non-IoC)

Evidence ledger

Ranked by severity · findings with a source location link to the code viewer

52 detail rows

YARA Rule Matches

10 rules
SeverityRuleHitsFilesMetadata
LOWpostinstall persistence mechanism 1
js/background.js
-
LOWLocalStorageShouldNotBeUsed 3
js/script.jsjs/createStickyNote.jsjs/todo.js
-
LOWpostinstall file download 6
js/script.jsjs/sidePanel.jsjs/weather.js +3 more
-
LOWSQLInjection 3
js/script.jsjs/jquery-3.7.1.min.jsjs/todo.js
-
LOWNoUseWeakRandom 2
js/createStickyNote.jsjs/jquery-3.7.1.min.js
-
LOWpostinstall file manipulation 14
js/popup.jsjs/countdownTimer.jsjs/jquery-3.7.1.min.js +11 more
-
LOWpostinstall network communication 7
js/countdownTimer.jsjs/jquery-3.7.1.min.jsjs/script.js +4 more
-
LOWpostinstall crypto operations 3
js/script.jsjs/jquery-3.7.1.min.js_metadata/verified_contents.json
-
LOWpostinstall obfuscation 5
js/sidePanel.jsjs/jquery-3.7.1.min.jsnewtab.html +2 more
-
LOWpostinstall system command 2
js/jquery-3.7.1.min.jsimg/bg.mp4
-

Publisher Evidence

Limited evidence

[email protected]

Publisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.

Chrome does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.

51
Noisy-finding weight
x1.00
Publisher domain
gameograf.com
Observed
Store verification signal
Limited signal
Limited
Extension portfolio
1.6K
Portfolio

11 evidence rows available.

Finding Categories

6
Network
296
IoC Indicators

YARA Rules Matched

10 rules(46 hits)
postinstall persistence mechanism LocalStorageShouldNotBeUsed postinstall file download SQLInjection NoUseWeakRandom postinstall file manipulation postinstall network communication postinstall crypto operations postinstall obfuscation postinstall system command

Requested Permissions

4 permissions
search
Low
alarms
Low
storage
Low
https://api.gameograf.com/*
Low

Security Analysis Summary

Security Analysis Overview

Jojo Dio Brando Gameograf is a Chrome Web Store extension published by [email protected]. Version 2.61 has been analyzed by the Risky Plugins security platform, receiving a risk score of 56.95/100 (MEDIUM risk) based on 348 security findings.

Risk Assessment

This extension presents moderate security risk. Several findings were detected that may warrant attention. Users should carefully review the permissions and findings before installation.

Findings Breakdown

  • Medium: 302 finding(s)
  • Low: 46 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Jojo Dio Brando Gameograf is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 2K users.

Recommendation

Exercise caution with this extension. Review the detailed findings and ensure the requested permissions align with the extension's stated functionality before installation.

Chrome version history

Risk trend by version

2 analyzed versions. Each point is the latest successful scan for that version; failed zero-score scans are hidden. Dates are based on first seen by risky plugins.

Selected
57
Change since first
+5
Change from previous
+5
Versions:
First analyzed version
2.60
Apr 29, 2026
Risk range
52 to 57
Across analyzed versions
Latest analyzed version
2.61
Oct 21, 2026
Selected version
medium
Version
v2.61
6 days ago
Risk score
57
Findings
348
Change vs previous
+5

Pick any point on the chart to explore that version's code below.

About This Extension

Jojo Dio Brando Gameograf features a dynamic HD live wallpaper designed around its visual theme, bringing the subject into every new tab with a continuously looping scene. Extension Features 🎞 Jojo Dio Brando Gameograf Video – Dynamic HD looped live wallpaper. 🔗 Popular Shortcuts – Quick access to YouTube, Netflix, ChatGPT, Amazon, and more. 🞞 Custom Shortcuts – Add your favorite websites for instant access. 🔍 Search Bar – Works seamlessly with your default search engine. 🕒 Clock & Date – Minimalist, always-on time & date widget. 📝 Sticky Notes – Colorful, draggable notes on your new tab. 🔔 Notifications – Get alerts about new wallpapers & features. 📧 Google Apps – One-click access to Gmail, Maps, Drive, and more. 🤖 ChatGPT Widget – Ask questions and get instant AI-powered answers. ✅ To-Do List – Organize your daily tasks directly on your new tab. 📅 Calendar Tool – Keep track of important dates. 🧮 Calculator – Perform calculations without leaving Chrome. ⏳ Timer – Built-in countdown for productivity or breaks. 🛠 More Tools – Includes privacy settings, uninstall guide, and support. About Us Gameograf.com develops premium Chrome new tab themes designed for anime, gaming, cars, celebrities, sports, and more. Enjoy visually stunning and immersive browsing experiences with every extension. 🌐 Website: https://gameograf.com 📩 Contact: https://gameograf.com/contact-us/ 🔒 Privacy Policy: https://gameograf.com/privacy-policy/ 💬 Feedback: https://gameograf.com/feedback/ 📧 Email: [email protected] Affiliate Policy Notice This extension opens a new tab at https://gameograf.com. Some links on our website including Amazon links may contain affiliate tracking. If you purchase through these links, Gameograf.com may earn a small commission, helping us maintain and improve our free extensions.

Frequently Asked Questions