AI 产品解读Secure password input bridge for ICBC online banking that uses a native Windows executable to handle password encryption instead of browser JavaScript
Protects password input during ICBC online banking sessions by routing password capture and encryption through a native EXE (com.google.chrome.icbc.plugin) rather than handling passwords in browser JavaScript, reducing exposure to web-based keyloggers and XSS attacks
1. User installs the extension and the accompanying ICBC native security EXE. 2. User navigates to an ICBC banking website (icbc.com.cn, 95588.com, etc.). 3. The content script injects into the page and the background script connects to the native EXE. 4. When ICBC's web page requests a secure password input, the extension creates a SafetyObject and registers it with the native EXE. 5. When the user clicks a password field, the extension activates secure input mode, routing keystrokes through the native EXE for encryption. 6. The encrypted password is passed back through the extension to the ICBC web page.
Creates secure password input fields (SafetyObjects) that communicate with a native Windows executable via Chrome's nativeMessaging APIActs as a message bridge between ICBC banking web pages and a local security executable for password encryptionSupports multiple encryption algorithms (CryptAlg parameter) for password protectionManages input focus/blur events to activate/deactivate secure input modeCleans browser history, cache, and cookies for ICBC-related domains upon requestSupports deep frame traversal to locate password fields within nested iframes on ICBC banking pages
- 目标用户
- ICBC (Industrial and Commercial Bank of China) online banking customers using Windows
- The native EXE (com.google.chrome.icbc.plugin) is not included in the extension package, so its exact encryption behavior cannot be verified from the extension source alone.
- The extension's full functionality requires both the Chrome extension and a separately installed native Windows application.
- Cannot determine from source code alone whether ICBC banking is truly required or if the extension could work on non-authenticated pages on those domains.
付费分析未识别到付费功能
No evidence of any paid features, subscription mechanisms, billing APIs, or upgrade prompts in the extension source code. The extension is a free security utility provided by ICBC (Industrial and Commercial Bank of China) to support their online banking platform. The 'pro' keyword hit in verified_contents.json is a false positive (it appears in base64-encoded content hashes, not related to 'Pro' plans).
- 置信度
- 95
- 支付平台
- --
- 来源
- AI / 高
- 需要登录
- 未知
- 登录理由
- --
工行:爱存不存 爱用不用 我就是不能用 来咬我
不可以用
工行:爱存不存 爱用不用 我就是不能用 来咬我
工行真的爱存不存,永远没法激活,装了不止一次了,看评价果然基本没人能正常使用,所以伟大的程序员同志们,给点力成不。。。要不咱直接说不行,别让人一遍遍装着心烦啊!
用不了,还是无法登入网银
Open ICBC website online banking in INTERNET EXPLORER (should be an older version!!!), just click "allow" when there are several prompts, I finally got into my ICBC online accnt, (you need that small device with numbers) no need for this crappy extensions!
能更废一点吗?
有个卵用
Didn't work at all.
Not work