50 Chrome extensions. One codebase. One backend. One API key.

June 28, 2026 Yanac

I reverse engineered a white-label WhatsApp CRM platform distributed across 50 Chrome Web Store extensions (~15,500 installs at the time of analysis). Every analyzed extension shares the same codebase, backend infrastructure, Firebase project, and hardcoded API key. Highlights: Replaces WhatsApp Web’s CSP Persistent communication via SSE and Firebase Cloud Messaging Voice transcription functionality Backend backup APIs Operator-configurable webhooks I also identified multiple privacy policies describing the same platform differently, with several backend communication mechanisms not discussed in the reviewed policies. Full report, IOCs, and the complete 50-extension cluster: https://malext.io/reports/WhatsCluster/ Related: WaSteal, my previous research on a different WhatsApp extension ecosystem. submitted by /u/Huge-Skirt-6990 [link] [comments]Technical Information Security Content & DiscussionRead More