Is WebAssistant4 safe?

WebAssistant4 lets any web page communicate with its native desktop app, with no check on who is asking.

The extension injects a message bridge (FireWyrm) into every page and iframe you visit, without checking that the message actually came from a trusted site. Any web page can use this bridge to open a connection to the locally installed ru.rustelecom.webassistant application and call its functions or read and write its data. Because the extension relays these messages without inspecting them, a malicious website could use this channel to interact with the native app on your computer.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.