Is CFCA JJCCB V3 Extension safe?
CFCA JJCCB V3 Extension bridges four Chinese bank sites to a local PKI native host, reachable over unencrypted http:// too.
This extension relays messages between web pages on jjccb.com, eqianjin.com.cn, jjebank.cn and jycbank.com and native desktop programs (com.cfca.seceditctl.jjccb, com.cfca.cryptokit.jjccb, com.cfca.certenrollment.jjbank) that handle digital certificate and signing operations for online banking. Its manifest lists http:// alongside https:// for these bank domains, so the same page-to-native-host messaging works even if a page loads over plain HTTP. This is a low-severity, unconfirmed finding rather than a demonstrated exploit.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 3.4.1.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on jjccb.com
http://*.jjccb.com/* and 1 more
Read and change your data on eqianjin.com.cn
http://*.eqianjin.com.cn/* and 1 more
Read and change your data on jjebank.cn
http://*.jjebank.cn/* and 1 more
Read and change your data on jycbank.com
http://*.jycbank.com/* and 1 more
Talk to a program installed on your computer, outside the browser's sandbox
nativeMessaging
Where it sends data
Destinations our analysis observed CFCA JJCCB V3 Extension contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- com.cfca.certenrollment.jjbank (native host)
CFCA JJCCB V3 Extension sends data to com.cfca.certenrollment.jjbank (native host). Named as a recipient in this extension's own analysis.
- com.cfca.cryptokit.jjccb (native host)
CFCA JJCCB V3 Extension sends data to com.cfca.cryptokit.jjccb (native host). Named as a recipient in this extension's own analysis.
- com.cfca.seceditctl.jjccb (native host)
CFCA JJCCB V3 Extension sends data to com.cfca.seceditctl.jjccb (native host). Named as a recipient in this extension's own analysis.