AI 产品解读Secure password input bridge for ICBC online banking that uses a native Windows executable to handle password encryption instead of browser JavaScript
Protects password input during ICBC online banking sessions by routing password capture and encryption through a native EXE (com.google.chrome.icbc.plugin) rather than handling passwords in browser JavaScript, reducing exposure to web-based keyloggers and XSS attacks
1. User installs the extension and the accompanying ICBC native security EXE. 2. User navigates to an ICBC banking website (icbc.com.cn, 95588.com, etc.). 3. The content script injects into the page and the background script connects to the native EXE. 4. When ICBC's web page requests a secure password input, the extension creates a SafetyObject and registers it with the native EXE. 5. When the user clicks a password field, the extension activates secure input mode, routing keystrokes through the native EXE for encryption. 6. The encrypted password is passed back through the extension to the ICBC web page.
Creates secure password input fields (SafetyObjects) that communicate with a native Windows executable via Chrome's nativeMessaging APIActs as a message bridge between ICBC banking web pages and a local security executable for password encryptionSupports multiple encryption algorithms (CryptAlg parameter) for password protectionManages input focus/blur events to activate/deactivate secure input modeCleans browser history, cache, and cookies for ICBC-related domains upon requestSupports deep frame traversal to locate password fields within nested iframes on ICBC banking pages
- 目标用户
- ICBC (Industrial and Commercial Bank of China) online banking customers using Windows
- The native EXE (com.google.chrome.icbc.plugin) is not included in the extension package, so its exact encryption behavior cannot be verified from the extension source alone.
- The extension's full functionality requires both the Chrome extension and a separately installed native Windows application.
- Cannot determine from source code alone whether ICBC banking is truly required or if the extension could work on non-authenticated pages on those domains.
付费分析未识别到付费功能
No evidence of any paid features, subscription mechanisms, billing APIs, or upgrade prompts in the extension source code. The extension is a free security utility provided by ICBC (Industrial and Commercial Bank of China) to support their online banking platform. The 'pro' keyword hit in verified_contents.json is a false positive (it appears in base64-encoded content hashes, not related to 'Pro' plans).
- 置信度
- 95
- 支付平台
- --
- 来源
- AI / 高
- 需要登录
- 未知
- 登录理由
- --