Suspicious 91% chrome 1,000 installs Download

Toyota Supra and Cute Babe Live Wallpaper 2.60

Remote HTML injection, data exfiltration

“Turn every new tab into a high-octane visual with the Toyota Supra and Cute Babe Live Wallpaper — the perfect Chrome wallpaper for car and…”

Gameograf new-tab and search takeover manifestGameograf new-tab page fronting user searches
SHA-256125085d928003b8f38271591d5e29d0beb0aec918f1769be84bab6d1ec9ff971
URLhttps://clients2.google.com/service/update2/crx?response=redirect&prodversion=131.0&acceptformat=crx3&x=id%3Degkahokhijlhocmfbmhndpilpdcjndjf%26installsource%3Dondemand%26uc
MaleculeK₂(NdLi)O₄(I₂As₃CS₂)H₇(Br₅Cm₁₆Db₂₁FHf₂Po₂U₉)Md₄(Bk₂Pa₂Pm)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.