Tracked campaign: View Driving Directions malware

Our analysis confirmed the behaviour described in the threat library entry. Do not install it. Read the analysis and indicators →

Also reported by malext.io

Chrome Web Store

View Driving Directions

by [email protected] · 2.0K users
f11d5719-0566-5c48-91c5-951878fbe3ed | v1.0.9

Marketplace listing not found

Our last marketplace check could not find this listing in Chrome Web Store. It may have been removed or delisted. Existing installs may still run, but verify the publisher and package source before installing or updating.

Not found on Today
61/ 100
MEDIUM risk
Threat verdict
Do not install

Confirmed member of a tracked malicious supply-chain campaign.

Analysis record

Analysed
5 months ago
Version
v1.0.9
Artifact
SHA256 3D4…3CF
Source
Findings (non-IoC)

Evidence ledger

Ranked by severity · findings with a source location link to the code viewer

1 detail row

Network Indicators

Concrete URLs, domains, IPs, emails, and hashes extracted from the analyzed artifact.

46 total

Loading network indicators

IoC detail rows are loaded outside the initial page render.

Publisher Evidence

Limited evidence

[email protected]

Publisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.

Chrome does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.

24
Noisy-finding weight
x1.00
Publisher domain
No domain
Missing
Store verification signal
Limited signal
Limited
Extension portfolio
1
Portfolio

13 evidence rows available.

Finding Categories

1
Network
46
IoC Indicators

Requested Permissions

3 permissions
storage
Low
alarms
Low
https://mapsdrivingdirections.com/*
Low

AI Security Report

AI Security Review

Evidence context: threat category adware; evidence quality moderate.

Security Analysis: View Driving Directions

This extension presents concerning indicators of adware or browser hijacking behavior. While it claims to "show a driving directions widget on every page," the network connections reveal activity inconsistent with legitimate mapping functionality.

Suspicious Network Domains

The extension connects to five domains with highly suspicious patterns: e.style.top, e.center, a.lat-o.lat, e.ms, and t.tab.id. These domains share characteristics typical of ad networks and tracking infrastructure: single-character subdomains combined with monetization-friendly TLDs (.top, .lat, .id). None of these domains are associated with legitimate mapping services. The Bing Maps API (dev.virtualearth.net) is legitimately used for geolocation services, but the additional suspicious domains serve no clear purpose for a directions widget.

Publisher and Adoption Concerns

The developer is listed as [email protected], an anonymous Gmail address with no company attribution or developer verification. The extension has zero users, indicating it is either brand new or has been abandoned. This anonymity combined with suspicious network activity is a significant risk indicator.

Absence of Malware Signatures

No malware signatures were detected in the code, and there are no obfuscation findings. However, the absence of malware signatures does not rule out adware behavior. Browser hijackers and adware often operate without traditional malware signatures while still compromising user experience and privacy through unwanted tracking and ad injection.

Counterargument Consideration

A skeptic might argue that the extension is benign, with the suspicious domains being third-party ad services used for monetization. However, legitimate extensions from verified publishers typically disclose such partnerships, and the domains' naming patterns (e.style.top, e.ms) are characteristic of stealth adware rather than transparent advertising networks. The mismatch between the extension's stated purpose (driving directions) and its actual network activity (connections to ad-like domains) suggests deceptive behavior.

Conclusion

This extension exhibits confirmed risk characteristics: anonymous publisher, suspicious ad/tracking domains inconsistent with stated functionality, and zero user adoption. While not confirmed malware, the evidence strongly indicates adware or browser hijacking behavior that could expose users to unwanted tracking and monetization schemes.

Key Reasons

  • Five suspicious ad/tracking domains (e.style.top, e.center, a.lat-o.lat, e.ms, t.tab.id) do not align with driving directions functionality
  • Anonymous Gmail developer with no company attribution
  • Zero user count indicates new or abandoned extension
  • No malware signatures but network activity suggests adware behavior

False Positive Considerations

  • Bing Maps API (dev.virtualearth.net) is legitimate geolocation service
  • mapsdrivingdirections.com and viewmapsdirections.com appear to be extension's own domains

Reviewed 2026-06-02; recommended action: monitor; model confidence 75%.

About This Extension

View Driving Directions is a comprehensive browser extension designed to enhance your web browsing with seamless access to maps, driving directions, and local search tools directly on any webpage you visit. Whether you are planning your daily commute, organizing a trip, or exploring nearby points of interest, this extension provides a convenient, customizable floating widget that integrates up-to-date mapping features without requiring you to navigate away from your current page. Engineered for maximum user convenience and flexibility, it offers quick toggles and advanced functionalities accessible either from the browser toolbar or via a subtle, easy-to-use widget embedded within the page. Once installed, the extension inserts a draggable floating widget powered by a fully featured embedded maps interface. This widget delivers real-time driving directions, traffic overlays, and lets you search for nearby amenities such as restaurants, gas stations, and emergency services. You can easily customize the widget’s position on the screen, open it for more detailed route planning, browse rich place information, or snooze or disable it as desired. The maps widget integrates multiple functional layers including traffic conditions and routing options for driving, walking, and cycling. It allows you to pin favorite places, quickly access place info cards containing addresses and phone numbers, and view detailed directions. Route calculations incorporate real-world variables like traffic flow, tolls, and scenic preferences, enabling you to compare alternative routes effectively. Searches for places and directions utilize sophisticated algorithms and reliable external APIs to provide precise and swift results all within the widget and the browser interface. Customization options are robust, allowing you to switch between multiple map visual styles such as light, dark, traffic, and aerial views. Your widget position, open/close state, and personal settings are saved persistently without the need for logging in, ensuring a consistent experience every time you browse. Key Features: - Embeds a floating, draggable maps widget on every webpage, providing instant access to maps and driving directions. - Interactive maps with real-time traffic overlays, comprehensive route planning, and powerful place search capabilities. - User-friendly popup menu allows easy toggling of widget visibility, Smart Content augmentation, and options to snooze or disable the widget. - Detailed place info cards show addresses, phone numbers, and direct routing for nearby points of interest. - Multiple customizable map styles including light, dark, traffic, and aerial layers to suit your viewing preferences. - Persistent saving of widget position, visibility status, and user preferences to maintain a seamless and personalized experience. How It Works: 1. Install the View Driving Directions extension from your browser’s extension store and pin it to your toolbar for easy access. 2. When browsing any webpage, the extension injects a floating widget onto the page, which you can click to open and interact with detailed maps and navigation features. 3. Use the toolbar popup menu to enable or disable the widget. 4. Enter addresses, places, or business names directly into the widget’s search bar to retrieve map locations and comprehensive info cards including contact details. 5. Plan routes for driving, walking, or cycling, selecting from options such as fastest path, scenic routes, or local preferences. 6. Customize map appearance by choosing your preferred visual style and reposition the widget via drag-and-drop to avoid interference with website content. 7. Utilize settings to temporarily snooze the widget or permanently disable it if you prefer not to use its features. You Can view our Privacy Policy at: https://mapsdrivingdirections.com/privacy.html We collect only the basic technical information needed to run and support the extension. This may include the page URL and title where the View Driving Directions Widget appears, extension errors, browser and extension version, approximate location for Driving Directions function, and timestamps. We use this information to fix problems, improve reliability, provide support, and help keep the service secure.

Frequently Asked Questions