Is WA Group Number Exporter safe?
WA Group Number Exporter sends your WhatsApp account phone number in telemetry to Alibaba Cloud SLS.
When it runs on WhatsApp Web, the extension reads the account phone number from WhatsApp local storage and saves it in extension storage. It then includes that number in telemetry events such as opening the popup, which are sent to an Alibaba Cloud SLS log endpoint.
Who publishes ityourdie2710 - 2 other listings from the same operator, 1 of them carrying a finding
yourdie2710 - 2 other listings from the same operator, 1 of them carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
2 other listings published from this account, 12k+ users between them. 1 of them carries a finding.
Shared hosts - 1 hostname
Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
WhatsApp phone number is sent to Alibaba Cloud telemetry
WA Group Number Exporter reads the WhatsApp account phone number from browser storage and includes it in telemetry sent to the Alibaba Cloud SLS endpoint extensionow-log.ap-southeast-1.log.aliyuncs.com/logstores/m-group/track.
- Severity
- Medium unwanted
- Type
- Unexpected
- CWE
- CWE-359
- Source
- Dynamic sandbox
The user uses WhatsApp Web or opens the extension popup.
The extension includes the WhatsApp account phone number in telemetry sent to Alibaba Cloud SLS.
- WhatsApp account phone number15551234567 (illustrative)
Identifies the WhatsApp account associated with the browser session.
Dynamic analysis confirmed the extension sends the stored account phone parameter through the configured Alibaba Cloud SLS tracker.
Where it sends data
Destinations our analysis observed WA Group Number Exporter contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- extensionow-log.ap-southeast-1.log.aliyuncs.com
WA Group Number Exporter sends data to extensionow-log.ap-southeast-1.log.aliyuncs.com. One other extension we have analysed sends data here.