Is CFCA CertEnrollment.CRBank Extension safe?
CFCA CertEnrollment.CRBank Extension relays crbank.com.cn page requests to a native messaging host with no in-handler sender check.
This extension bridges crbank.com.cn banking pages to a native messaging host installed locally on the user's machine, supporting certificate enrollment and related security operations. Pages on crbank.com.cn can ask it to connect to a named native host and then forward arbitrary message payloads to that host's process; the code itself performs no additional sender check, relying only on Chrome's enforcement of the manifest's externally_connectable scope.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 3.2.0.1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on crbank.com.cn
https://*.crbank.com.cn/* and 1 more
Talk to a program installed on your computer, outside the browser's sandbox
nativeMessaging
Where it sends data
Destinations our analysis observed CFCA CertEnrollment.CRBank Extension contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- locally installed CFCA native messaging host
CFCA CertEnrollment.CRBank Extension sends data to locally installed CFCA native messaging host. Named as a recipient in this extension's own analysis.