Hostile 92% chrome Download

SearchSwiftly 0.0.4

Browser hijacker, data exfiltration

“Introducing SearchSwiftly - your gateway to streamlined browsing on Chrome. Say goodbye to endless search results and hello to efficiency.…”

Extension couples external webpage messaging with default search hijackingReferences the toString conversion method
SHA-25612bbee3cef3fa82d0c86b46d2208d6c8ebbf903985bd2ab62183a8cb4d1245ac
URLhttps://clients2.google.com/service/update2/crx?response=redirect&prodversion=131.0&acceptformat=crx3&x=id%3Dhoahknejncfppniniebcmmmfgbbkoopp%26installsource%3Dondemand%26uc
MaleculeO₃(SCoI)H₆(Br₅Cm₈Db₁₀FOsPo)Md₃(PaPm₃)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.