AitM Block

Detect and block Adversary-in-the-Middle (AitM) phishing attacks targeting Microsoft 365 and Azure login pages.

Users20K

Rating5.0

Reviews1

Manifest versionV3

7-day growth-10K

7-day growth rate-33.3%

Preview

AitM Block Media preview

5 assets

Trend

30-day user trend

Review user movement over the last 30 days.

User Growth Over Time

Rating trend

30-day rating change

Track rating movement over time to see whether quality signals remain stable.

30-day rating change

Start

5.00

Latest

5.00

30-day rating change

0.00

2026年6月6日2026年6月12日

Growth overview

Daily, weekly, and monthly growth

Compare 1-day, 7-day, and 30-day net growth and growth rate.

1-day growthFlat

00%

7-day growthDeclining

-10K-33.3%

30-day growthFlat

00%

Technical snapshot

Version, languages, and crawl freshness

Review publication date, version, supported languages, and crawl timestamps.

Version0.2.7

ManifestV3

Size37.41KiB

Languages4Deutsch / English / Nederlands +1

Published--

Store updated--

Last crawled--

Overview

Product summary

Review the store description, core capabilities, and common use cases.

**About**

AitM Block, developed by Eye Security, helps protect you against advanced Microsoft Adversary-in-the-Middle (AitM) phishing attacks. These attacks are designed to steal credentials and session tokens by intercepting communication between you and legitimate Microsoft services, making them far more dangerous than traditional phishing.

This extension focuses on detecting suspicious pages that mimic Microsoft login pages, reducing the risk of credential theft before you interact with these phishing pages. It works silently in the background and does not interfere with normal browsing or legitimate Microsoft pages.

**Features**

✓ Detects and warns about suspicious Microsoft-style login elements commonly used in AitM phishing campaigns.

✓ Lightweight and non-intrusive: does not affect normal browsing.

Reviews

Recent review snapshot

Inspect the latest comments and rating distribution.

The Chrome Web Store shows 1 reviews, but only 0 review bodies have synced into ExtScope so far. Showing the synced reviews available right now.

5★

4★

3★

2★

1★

Similar and related extensions

Review related products from the Chrome Web Store detail page.

Video Freeze

Fun

Play a youtube video for a random number of seconds. Great for musical chairs, musical statues and more!

BlankSlate

Functionality & UI

BlankSlate is an open-source, lightweight new tab extension designed for users who prefer a clean and minimal browsing experience.

CastLists by Casting Workbook

Workflow & Planning

CastLists Chrome Extension

Michael's Upgrade for TrakED

Tools

Upgraded features for TrakED in the THS. (This extension is not an official product of the THS or Intersystems TrakCare software.)

StackBob

Workflow & Planning

StackBob’s browser agent (Agent Bob) helps teams to stay compliant, secure and efficient. Agent Bob is an essential part of…

The Big Gift List

Shopping

FreemiumConfidence 64

Easily add items to your 'The Big Gift List' lists

AI product read

Detect and block Adversary-in-the-Middle (AitM) phishing attacks that target Microsoft 365 and Azure login pages

AitM phishing attacks are more dangerous than traditional phishing because they intercept communication between users and legitimate Microsoft services, stealing both credentials AND session tokens. Traditional anti-phishing tools may miss these attacks. This extension specifically detects the behavioral and DOM indicators of AitM kits in real time.

Extension runs silently on all webpages via content scripts. On every page load, it checks if the current domain is a legitimate Microsoft domain or trusted platform. If not, it scans for phishing indicators: Microsoft-style blue sign-in buttons with login text, anti-devtools traps (keydown/contextmenu blockers, debugger traps), device code patterns, and encrypted payload loaders. Detection rules use AND-chains (e.g., anti-devtools + blue button). When a match fires, a warning banner overlays the page, the phishing URL is reported to Eye Security, and the user can choose to navigate to safety or dismiss.

Target users: Microsoft 365 and Azure AD users / Corporate security teams and administrators / Individual users concerned about credential theft / Cybersecurity professionals

Cannot verify what https://links.eye.security/aitm does with reported phishing URLs (could be telemetry aggregation or a landing page)

Monetization

No paid features detected

The extension is explicitly described as 'Free to use: our way of giving back to the cybersecurity community' in the Chrome Web Store listing. The source code contains no billing logic, subscription checks, license validation, payment UI, or feature gating. All 'pro' keyword matches in the source are false positives (stopPropagation, production, probes, promise, prototype, probed). The external endpoint https://links.eye.security/aitm is a fire-and-forget phishing report beacon, not a billing API.

Confidence: 98
Payment platform: --
Source: AI / High
Login required: No
Reason: The extension requires no login whatsoever. All 'log in' / 'signin' keyword matches are false positives referring to detecting phishing pages that mimic Microsoft login forms — they are detection targets, not user authentication requirements. The popup UI has only toggle switches (enable/disable, debug mode) with no account fields. No authentication calls are made. Settings are stored locally via chrome.storage.local.

Permission risk

High-risk permissions

This estimate uses declared permissions and host permissions to assess access scope and sensitivity.

扩展能力较强：activeTab、storage
主机权限覆盖范围较宽

Publisher

Eye Security

Eye Security B.V.

Email: [email protected]
Phone: +31653625675
Address: Saturnusstraat 60, Unit 54 Den Haag 2516 AH NL

Public contact fields are shown above. Developer portfolio pages are available on paid accounts.

View developer portfolio

Permissions

Host access