Tracked campaign: Gameograf / Ovkas wallpaper adware

Our analysis confirmed the behaviour described in the threat library entry. Read the analysis and indicators →

Also reported by raw.githubusercontent.com

Chrome Web Store

Cristiano Ronaldo Cursor 999

f627c53f-4d4f-5578-b32b-d1a6d0f327ee | v1.1.0
0/ 100
MINIMAL risk
Threat verdict
Do not install

Confirmed member of a tracked malicious supply-chain campaign.

Analysis record

Analysed
4 days ago
Version
v1.1.0
Artifact
SHA256 4CC…659
Source
Findings (non-IoC)

Evidence ledger

Ranked by severity · findings with a source location link to the code viewer

16 detail rows

YARA Rule Matches

7 rules
SeverityRuleHitsFilesMetadata
LOWpostinstall crypto operations 1
_metadata/verified_contents.json
-
LOWpostinstall file manipulation 3
content/content.jsbackground.jspopup/popup.js
-
LOWpostinstall obfuscation 3
popup/popup.jslib/render.jspopup/popup.html
-
LOWpostinstall network communication 1
content/content.js
-
LOWpostinstall system command 2
background.jspopup/popup.css
-
LOWpostinstall file download 2
lib/catalog.jslib/render.js
-
LOWpostinstall persistence mechanism 1
background.js
-

Publisher Evidence

Limited evidence

[email protected]

Publisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.

Chrome does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.

30
Noisy-finding weight
x1.00
Publisher domain
No domain
Missing
Store verification signal
Limited signal
Limited
Extension portfolio
5
Portfolio

12 evidence rows available.

Finding Categories

3
Network

YARA Rules Matched

7 rules(13 hits)
postinstall crypto operations postinstall file manipulation postinstall obfuscation postinstall network communication postinstall system command postinstall file download postinstall persistence mechanism

Requested Permissions

3 permissions
<all_urls>

Access and modify data on every website you visit

Dangerous
storage
Low
scripting
Low

Security Analysis Summary

Security Analysis Overview

Cristiano Ronaldo Cursor 999 is a Chrome Web Store extension published by [email protected]. Version 1.1.0 has been analyzed by the Risky Plugins security platform, receiving a risk score of 0/100 (MINIMAL risk) based on 0 security findings.

Risk Assessment

This extension presents minimal security concerns. The automated analysis found very few or no issues, suggesting it is suitable for general use.

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Cristiano Ronaldo Cursor 999 is published by [email protected] on the Chrome Web Store marketplace.

Recommendation

Based on the automated security analysis, this extension appears safe for general use. As with any extension, users should review the requested permissions before installation.

About This Extension

Cristiano Ronaldo Cursor 999 – Custom CR7 Mouse Cursors Bring your love for Cristiano Ronaldo to your browser with Cristiano Ronaldo Cursor 999! ⚽🖱️ Transform your ordinary mouse cursor with Cristiano Ronaldo and CR7 inspired designs. Explore football-themed cursor styles and add a unique touch to your everyday browsing experience. 🎉 WELCOME TO GAMEOGRAF! When you install Cristiano Ronaldo Cursor 999, the Gameograf.com website opens in a new tab, welcoming you to a world of gaming, wallpapers, and digital entertainment. ⚽ FEATURES Cristiano Ronaldo Cursor Designs: Choose from a collection of Ronaldo-inspired cursor designs. Animated GIF Cursor: Enjoy a moving GIF cursor that brings extra personality to your browsing experience. Adjustable Cursor Size: Customize your cursor size from 16 to 128 pixels. Easy Cursor Selection: Open the extension popup and click the cursor design you want to use. Quick On and Off Control: Enable or disable your custom cursor whenever you want. Website-Specific Controls: Disable the custom cursor on individual websites while keeping it enabled on others. Keyboard Shortcut: Quickly toggle your custom cursor using Alt + Shift + C. Saved Preferences: Your cursor selection, size, and website preferences are stored locally in your browser. 🖱️ HOW TO USE Install Cristiano Ronaldo Cursor 999 from the Chrome Web Store. Gameograf.com opens in a new tab after installation. Click the extension icon in your Chrome toolbar. Browse the available cursor designs and select your favorite. Adjust the cursor size to suit your preferences. Enable or disable your custom cursor whenever you want. 🌟 SHOW YOUR CR7 PASSION Whether you're a dedicated Cristiano Ronaldo fan or simply enjoy unique mouse cursors, Cristiano Ronaldo Cursor 999 lets you personalize your browser with football-inspired designs. Choose your favorite cursor, enjoy the animated GIF design, and bring your CR7 passion to your everyday browsing! 🔒 SIMPLE AND CONVENIENT Your cursor preferences are stored locally using Chrome's storage. No account is required to select and customize your cursor. ⚠️ IMPORTANT COMPATIBILITY INFORMATION Chrome restricts extensions from changing the cursor on certain browser pages, including Chrome Web Store pages and internal Chrome pages such as Settings and Downloads. If the cursor does not appear on a website that was already open when you installed the extension, refresh the page and try again. Personalize your browser with Cristiano Ronaldo Cursor 999 and discover more at Gameograf.com! ⚽

Frequently Asked Questions