Whats360

Extension Purpose

The Whats360 Chrome extension is designed to enhance WhatsApp Web by providing CRM capabilities, message automation, bulk messaging, and sales funnel visualization. It aims to streamline contact management and improve sales efficiency through WhatsApp.

Key Functionalities

• Automated Messaging: The extension can automatically send messages based on predefined rules and triggers.
• CRM Integration: It integrates with a CRM system to manage contacts and sales processes.
• Bulk Messaging: Supports sending messages to multiple contacts simultaneously.
• Sales Funnel Visualization: Provides a visual representation of the sales process.

API Calls and Network Activity

• Chrome Tabs API: Utilizes chrome.tabs.query and chrome.tabs.sendMessage to interact with WhatsApp Web tabs.
• Network Requests: Makes HTTP requests to external APIs for bot communication and file handling.

Process Execution

• Message Handling: Processes incoming messages to determine if they match predefined triggers for automated responses.
• File Handling: Supports sending various file types (text, image, audio, video) through WhatsApp Web.

Data Handling

• Local Storage: Uses chrome.storage.local to store and retrieve user settings and contact data.
• Data Exfiltration: No evidence of unauthorized data exfiltration was found.

Potential Malicious Indicators

• Obfuscation: The code imports several obfuscated JavaScript files, which could potentially hide malicious behavior.
• Backdoor Potential: The extension has extensive permissions to interact with WhatsApp Web, which could be exploited if the extension's integrity is compromised.

Code Snippet of Interest

async function pe(e){
  const {from:t,id:{fromMe:n}}=e;
  if(n)return!1;
  const i=Object.values(Q).filter(s=>s.active);
  if(!i.length)return!1;
  const a=await Se(t);
  B.has(t)||B.set(t,{actionsQueue:[],chat:a});
  const r=B.get(t);
  for(const s of i){
    if(!await me(s.rules,e)||!await he(s.triggers,e))continue;
    const d={name:s.name,triggers:Object.values(s.triggers).map(u=>u.type),actions:Object.values(s.actions).map(u=>u.type)};
    le({chat:{...r.chat},eventId:"autoService",eventInfo:d}),await ye(s.actions,r,t)
  }
  return!0
}

This function processes incoming messages and determines whether to execute automated actions based on predefined rules and triggers.

Conclusion

The extension appears to be focused on enhancing WhatsApp Web for sales and CRM purposes. While it has extensive permissions and uses obfuscated code, no direct evidence of malicious activity was found. However, the potential for misuse exists if the extension's integrity is compromised.