Is CFCA CryptoKit.HANABANK Extension safe?

Low risk

CFCA CryptoKit.HANABANK Extension lets allowed Hana Bank pages send payloads to a selected native messaging host.

Allowed Hana Bank web pages can connect the extension to a native messaging host and pass funcInfo payloads through it. The recorded claim names Hana Bank domains and internal 172.28.70.x hosts as the allowed external senders, but does not identify a remote data recipient receiving those payloads.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

hanacnchannelv3.4.0.2Chrome Web Store
17Risk
Who publishes it

hanacnchannel - 1 other listing from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
hanacnchannel

Same store account

1 other listing published from this account, 1k+ users between them, none of them carrying a finding.

CFCA SecEditCtl.HANA Extension1k+Low

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 3.4.0.2. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on 172.28.70.201

    http://172.28.70.201/* and 1 more

  • Read and change your data on 172.28.70.202

    http://172.28.70.202/* and 1 more

  • Read and change your data on 172.28.70.171

    http://172.28.70.171/* and 1 more

  • Read and change your data on hanabank.cn

    https://*.hanabank.cn/* and 1 more

  • Talk to a program installed on your computer, outside the browser's sandbox

    nativeMessaging

Updated 30 September 2026dndjlipbogdpgefamcnpodkehgblaeel