Is Transfer Dropbox to Google Drive safe?

Transfer Dropbox to Google Drive uses a hardcoded AES-128-ECB key to decrypt all API responses from its backend, exposing user data to any party with access to the extension source.

The extension communicates with app.multcloud.com using AES-128-ECB encryption, but the decryption key is stored in plain text inside the public extension bundle. ECB mode produces no per-message randomness, and because the key is publicly readable, any network observer who captures traffic can decrypt API responses. Those responses include drive identifiers, token IDs, file paths, task schedules, and sync status for the user's connected cloud storage accounts.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.