AI product readSecure password input bridge for ICBC online banking that uses a native Windows executable to handle password encryption instead of browser JavaScript
Protects password input during ICBC online banking sessions by routing password capture and encryption through a native EXE (com.google.chrome.icbc.plugin) rather than handling passwords in browser JavaScript, reducing exposure to web-based keyloggers and XSS attacks
1. User installs the extension and the accompanying ICBC native security EXE. 2. User navigates to an ICBC banking website (icbc.com.cn, 95588.com, etc.). 3. The content script injects into the page and the background script connects to the native EXE. 4. When ICBC's web page requests a secure password input, the extension creates a SafetyObject and registers it with the native EXE. 5. When the user clicks a password field, the extension activates secure input mode, routing keystrokes through the native EXE for encryption. 6. The encrypted password is passed back through the extension to the ICBC web page.
Creates secure password input fields (SafetyObjects) that communicate with a native Windows executable via Chrome's nativeMessaging APIActs as a message bridge between ICBC banking web pages and a local security executable for password encryptionSupports multiple encryption algorithms (CryptAlg parameter) for password protectionManages input focus/blur events to activate/deactivate secure input modeCleans browser history, cache, and cookies for ICBC-related domains upon requestSupports deep frame traversal to locate password fields within nested iframes on ICBC banking pages
- Target users
- ICBC (Industrial and Commercial Bank of China) online banking customers using Windows
- The native EXE (com.google.chrome.icbc.plugin) is not included in the extension package, so its exact encryption behavior cannot be verified from the extension source alone.
- The extension's full functionality requires both the Chrome extension and a separately installed native Windows application.
- Cannot determine from source code alone whether ICBC banking is truly required or if the extension could work on non-authenticated pages on those domains.
MonetizationNo paid features detected
No evidence of any paid features, subscription mechanisms, billing APIs, or upgrade prompts in the extension source code. The extension is a free security utility provided by ICBC (Industrial and Commercial Bank of China) to support their online banking platform. The 'pro' keyword hit in verified_contents.json is a false positive (it appears in base64-encoded content hashes, not related to 'Pro' plans).
- Confidence
- 95
- Payment platform
- --
- Source
- AI / High
- Login required
- Unknown
- Reason
- --
没球卵用
哇!从来没用过这么垃圾的网银,这网页版扫码登录是什么鬼?完全没法用啊!
没用
别看了,永远激活不了,IE打开一片空白,app登录不了,明明预留了手机号,死活提示没有,登录就强制退出,ICBC NMSL
与chrome应该是不兼容的,安装后还是不显示控件部分,用了其他的浏览器专门打开验证界面。
ICBC NMSL
not working
TERRIBLE! ICBC CHINA has a horrible user interface for their website! Stupid usb or calculator generating tools that cause tremendous headaches. ZERO CUSTOMER SUPPORT FOR THE ONLINE HELL.Stupid extension does nothing do not add. DO NOT USE ICBC BANK ELSEWHERE!!!
垃圾!!! 根本没有用,安装后永远无法显示密码输入框。 问了工行客服,现阶段工行支持最好的浏览器是IE 6。一款20多年前,现在已绝版的浏览器!!! 扫码登录,一样也无法登录。 Shiiiiiiiiiiiiiiiiiiiiiiiiiiiit!
20181122 不能用