Is CFCA CryptoKit.ADBC Extension safe?
CFCA CryptoKit.ADBC bridges pages on adbc.com.cn and hellotech.top to a locally installed bank PKI/certificate app via native messaging.
The extension's only job is to relay messages between web pages and a locally installed CFCA native host that performs certificate and signing operations for online banking. Its background script forwards a page-supplied host name into chrome.runtime.connectNative and passes message payloads through verbatim, with the only control being that the calling page must be served from *.adbc.com.cn or *.hellotech.top. Because those allowed origins include plain http:// as well as https://, a page on those domains reached over an untrusted network could also open the native bridge. The extension itself sends no data to any remote server.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itliangjiangjian - 3 other listings from the same operator, none carrying a finding
liangjiangjian - 3 other listings from the same operator, none carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
3 other listings published from this account, 130k+ users between them, none of them carrying a finding.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 3.4.0.2. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on adbc.com.cn
https://*.adbc.com.cn/* and 1 more
Read and change your data on hellotech.top
http://*.hellotech.top/* and 1 more
Talk to a program installed on your computer, outside the browser's sandbox
nativeMessaging
Where it sends data
Destinations our analysis observed CFCA CryptoKit.ADBC Extension contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- Local CFCA native messaging host (installed PKI/signing application)
CFCA CryptoKit.ADBC Extension sends data to Local CFCA native messaging host (installed PKI/signing application). Named as a recipient in this extension's own analysis.