AI 产品解读Secure password input bridge for ICBC online banking that uses a native Windows executable to handle password encryption instead of browser JavaScript
Protects password input during ICBC online banking sessions by routing password capture and encryption through a native EXE (com.google.chrome.icbc.plugin) rather than handling passwords in browser JavaScript, reducing exposure to web-based keyloggers and XSS attacks
1. User installs the extension and the accompanying ICBC native security EXE. 2. User navigates to an ICBC banking website (icbc.com.cn, 95588.com, etc.). 3. The content script injects into the page and the background script connects to the native EXE. 4. When ICBC's web page requests a secure password input, the extension creates a SafetyObject and registers it with the native EXE. 5. When the user clicks a password field, the extension activates secure input mode, routing keystrokes through the native EXE for encryption. 6. The encrypted password is passed back through the extension to the ICBC web page.
Creates secure password input fields (SafetyObjects) that communicate with a native Windows executable via Chrome's nativeMessaging APIActs as a message bridge between ICBC banking web pages and a local security executable for password encryptionSupports multiple encryption algorithms (CryptAlg parameter) for password protectionManages input focus/blur events to activate/deactivate secure input modeCleans browser history, cache, and cookies for ICBC-related domains upon requestSupports deep frame traversal to locate password fields within nested iframes on ICBC banking pages
- 目标用户
- ICBC (Industrial and Commercial Bank of China) online banking customers using Windows
- The native EXE (com.google.chrome.icbc.plugin) is not included in the extension package, so its exact encryption behavior cannot be verified from the extension source alone.
- The extension's full functionality requires both the Chrome extension and a separately installed native Windows application.
- Cannot determine from source code alone whether ICBC banking is truly required or if the extension could work on non-authenticated pages on those domains.
付费分析未识别到付费功能
No evidence of any paid features, subscription mechanisms, billing APIs, or upgrade prompts in the extension source code. The extension is a free security utility provided by ICBC (Industrial and Commercial Bank of China) to support their online banking platform. The 'pro' keyword hit in verified_contents.json is a false positive (it appears in base64-encoded content hashes, not related to 'Pro' plans).
- 置信度
- 95
- 支付平台
- --
- 来源
- AI / 高
- 需要登录
- 未知
- 登录理由
- --
Extensions were added, drivers were installed, and it was ready to use.
垃圾again
可以说是垃圾中的战斗机
工行该好好改善一下服务了
it works perfectly on internet explorer
Always Crash 经常崩溃, 感觉不靠谱
Not working. Still ask me to install plugin on the login page.
This extension does not work with Microsoft Edge. Please update.
是工行让我知道了EDGE并不是IE的升级版,而WIN10其实还另外内置了IE11,工行伟大
垃圾