Is CFCA SecEditCtlAdv.ICBC Extension safe?

Low risk

CFCA SecEditCtlAdv.ICBC Extension lets ICBC web pages send caller-controlled messages to its native bridge.

The extension accepts external messages from configured ICBC and 95588 web origins, including HTTP origins, and opens a native-messaging connection using the host name supplied in the request. If the matching local native host is installed, the extension forwards the page-supplied message to that native bridge.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

icbcmobilebankingv3.3.0.2Chrome Web Store
17Risk
Who publishes it

icbcmobilebanking - 2 other listings from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
icbcmobilebanking

Same store account

2 other listings published from this account, 410k+ users between them, none of them carrying a finding.

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 3.3.0.2. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on localhost

    https://localhost/*

  • Talk to a program installed on your computer, outside the browser's sandbox

    nativeMessaging

Updated 30 September 2026nempbakhhmgohfbfanjcplggoomgenef