More info on PUP.Facebook Invite All

[MrElvey]

Hi.  MBAM found PUP.Facebook Invite All on my Mac.  It looks like I installed a Google Chrome extension, at a friend's request, if I recall correctly. 

It seems to refer to this: https://chrome.google.com/webstore/detail/inmmhkeajgflmokoaaoadgkhhmibjbpj/reviews =

Invite All Friends on Facebook

offered by Mohammed N. El-Madhoun; 5 stars.

It seems legit at first blush.  Any more info available?  

Update: here's what I've found so far:

It includes a file called bg.js that includes this, which is at least slightly sketch:

Quote

if(localStorage["ver"] !="1.8.0"){
    var r = parseInt(Math.random()*3);
    if(r==0){
        chrome.tabs.create({url:"http://optimusgl.com/flappy-circle/"});
    }else if(r==1){
        chrome.tabs.create({url:"http://optimusgl.com/impossible-rush/"});
    }else if(r==2){
        chrome.tabs.create({url:"http://optimusgl.com/piano-tiles/"});
    }
    //chrome.tabs.create({url:"http://www.tank-box.com/"});
    
    localStorage["ver"] = "1.8.0";
}

In the description at google.com, it says:

-- This extension open ads once a month as new-tap 
-*-If you have any problem please send me a screenshot of your problem at my email-*-
mohelm97{at}gmail

Version: 1.8.6
Updated: June 8, 2017

So I guess it's been classified as a PUP due to this pretty harmless behavior.  Feeling relieved.  If there's anything more concerning, please let me know.  The google site does have a Report Abuse link -  https://chrome.google.com/webstore/report/inmmhkeajgflmokoaaoadgkhhmibjbpj?hl=en-US&gl=US - for reporting malware...

Edited June 16, 2017 by MrElvey

[treed]

A PUP, or "potentially unwanted program," is always something that exhibits some non-harmful but usually unwanted behavior, such as redirects or inappropriate ads in the web browser. Since this extension is identified as a PUP, that means it's not actively harmful, but you should still think twice before using it.