Steam Sheriff
Checks URLs visited by user to help prevent Steam phishing attacks
什麼是Steam Sheriff？
Steam Sheriff是由zma4580開發的Chrome擴展程式，該擴展的主要功能是“Checks URLs visited by user to help prevent Steam phishing attacks”。
擴展截圖
下載Steam Sheriff擴展crx文件
下載Steam Sheriff擴展crx格式的文件，手動將Chrome擴充功能安裝到瀏覽器中，也可以將crx文件分享給朋友，輕鬆安裝Chrome擴充功能。
擴展使用說明
Steam Sheriff helps gamers using the Steam platform by checking URLs as they are visited to see if they are potentially impersonating a 'brand'.
Malware/Phishing actors make websites that closely resemble a 'brand'. For example, the legitimate Steam website is www.steamcommunity.com. Phishers leverage 'homograph' attacks to trick you to clicking a URL that you think you trust. So, st3amcommunity.com or steamcomunity.com might look legitimate to a human, but very different for a computer.
In order to detect these attacks, Steam Sheriff uses a combination of techniques to find out the 'similarity' of a target compared to a white list. This whitelist are common websites collected from feedback from the community that have also been used in attacks in the past. The list is as follows:
'gyazo.com',
'flickr.com',
'imgur.com',
'photobucket.com',
'tinypic.com',
'dota2lounge.com',
'csgolounge.com',
'steamcommunity.com',
'csgoticket.com',
'csgojackpot.com',
'csgoskins.net',
'mumble.info',
'teamspeak.com',
'raidcall.com',
'ventrilo.com'
This list will be updated periodically as the tactics of the phishers change.
**NOTE**
There might be issues with steamcommunity and websites that use akamai where it wont load resources if its being loaded by content distribution networks (CDNs). If something breaks, please e-mail the contact e-mail listed on this extension page or the warning page.
Features:
- 'Real-time' detection of potential phishing websites
- Option menu when a website is potentially bad
- 'Continue Once' which allows the website to be visited for 5 minutes before Steam Sheriff alerts on it again
- 'Continue & Whitelist' which adds the website to a user-defined whitelist if there is a false positive. This gets cleared if Chrome browser data is cleared
- 'Get me out of here!' Redirect to google.com
Upcoming Features:
- Reporting mechanism
- Configuration page to edit whitelists and blacklists
Reporting:
-If there is ever a false positive, you can report it to [email protected]. A false positive results from Steam Sheriff thinking that a legitimate website is a bad website.
-If there is ever a false negative, you can report it to [email protected]. A false negative results from Steam Sheriff *NOT* alerting on a bad website and thinking its a legitimate website.
DONATION!
Please visit https://hackandflash.com/?page_id=110 to donate and help me pay for hosting feeds, app dev time and also paying the my amazing designer/UX friends who help make Steam Sheriff look professional and clean. 擴展基本資訊
| 名稱 |  Steam Sheriff |
| ID | gepneajfhahnllbbdfiamgbifcikpoie |
| 官方網址 | https://chrome.google.com/webstore/detail/steam-sheriff/gepneajfhahnllbbdfiamgbifcikpoie |
| 簡介 | Checks URLs visited by user to help prevent Steam phishing attacks |
| 檔案大小 | 155 KB |
| 安裝次數 | 34 |
| 目前版本 | 0.3 |
| 更新時間 | 2015-08-06 |
| 上架時間 | 2015-08-06 |
| 評分 | 1.00/5 共 1 次評分 |
| 開發者 | zma4580 |
| 付費類型 | free |
| 支援的語言 | en |
| manifest.json | |
{
"update_url": "https:\/\/clients2.google.com\/service\/update2\/crx",
"manifest_version": 2,
"content_security_policy": "script-src 'self'; object-src 'self';",
"name": "Steam Sheriff",
"description": "Checks URLs visited by user to help prevent Steam phishing attacks",
"author": "Zack Allen",
"version": "0.3",
"background": {
"scripts": [
"js\/background.js",
"js\/jdist.js",
"js\/jquery-2.1.4.min.js",
"js\/jquery-ui.js",
"js\/acc.js"
]
},
"permissions": [
"webRequest",
" | |
![[Steam Security Suite]](https://lh3.googleusercontent.com/ucj51b4r8vi3Pc9chl5rssCRBAHT_bFCm2dcu228RL_avFApq_DS6gFQJnRuRS8iL46QJSL6NM3VyzxCS0ZsWimhfA)
