Is SYTools safe?
SYTools collects every URL visited in any browser tab and transmits browsing history to a locally installed native host every 5 minutes.
On Linux, the extension records each URL with entry and exit timestamps and batches these records to the ru.tensor.sbis_plugin_nmh native messaging host at 5-minute intervals. It also provides an on-demand HAR recorder: when activated via the popup, it attaches Chrome DevTools to the active tab to capture full HTTP request and response bodies, including headers and cookies, and uploads the resulting HAR file to the current Saby domain's /logreceiver/service/upload_har/ endpoint. The HAR feature is gated to domains returned by the vendor's own cloud-list API.
Who publishes itwasaby - 1 other listing from the same operator, none carrying a finding
wasaby - 1 other listing from the same operator, none carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
1 other listing published from this account, 1k+ users between them, none of them carrying a finding.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed SYTools contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- *.sbis.ru/logreceiver/service/upload_har/
SYTools sends data to *.sbis.ru/logreceiver/service/upload_har/. No other extension we have analysed sends data here.
- ru.tensor.sbis_plugin_nmh (native host)
SYTools sends data to ru.tensor.sbis_plugin_nmh (native host). Named as a recipient in this extension's own analysis.