is in theprivacy andsecuritycategorycollectsshoppingdatacontactemail isnotmonitoredexfiltratesfull URLstargetedtowardskidsRatedover 4starsexecutescorefunctionswellusesWASMmisleadsusersabout datacollectiondoesn't tellusers aboutupdates toprivacypolicygotpopularthen wassold offdarkpattern ononboardingfrom averifiedpublisherexfiltratesAI chatsowned byadatabrokerwasopensourcethenswitched toclosednoprivacypolicyremindersaboutaccepting"opt in"privacy policyMisleadingprivacypolicyrequirespermissionstochange/readall sitesobfuscatesnetworkrequestsis afeaturedextensionhasrandomdomainsfor exfilcommitsaffiliatefraudis in theprivacy andsecuritycategorycollectsshoppingdatacontactemail isnotmonitoredexfiltratesfull URLstargetedtowardskidsRatedover 4starsexecutescorefunctionswellusesWASMmisleadsusersabout datacollectiondoesn't tellusers aboutupdates toprivacypolicygotpopularthen wassold offdarkpattern ononboardingfrom averifiedpublisherexfiltratesAI chatsowned byadatabrokerwasopensourcethenswitched toclosednoprivacypolicyremindersaboutaccepting"opt in"privacy policyMisleadingprivacypolicyrequirespermissionstochange/readall sitesobfuscatesnetworkrequestsis afeaturedextensionhasrandomdomainsfor exfilcommitsaffiliatefraud

Malicious Extension Bingo - Call List

(Print) Use this randomly generated list as your call list when playing the game. There is no need to say the BINGO column name. Place some kind of mark (like an X, a checkmark, a dot, tally mark, etc) on each cell as you announce it, to keep track. You can also cut out each item, place them in a bag and pull words from the bag.


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
  1. is in the privacy and security category
  2. collects shopping data
  3. contact email is not monitored
  4. exfiltrates full URLs
  5. targeted towards kids
  6. Rated over 4 stars
  7. executes core functions well
  8. uses WASM
  9. misleads users about data collection
  10. doesn't tell users about updates to privacy policy
  11. got popular then was sold off
  12. dark pattern on onboarding
  13. from a verified publisher
  14. exfiltrates AI chats
  15. owned by a databroker
  16. was opensource then switched to closed
  17. no privacy policy
  18. reminders about accepting "opt in" privacy policy
  19. Misleading privacy policy
  20. requires permissions to change/read all sites
  21. obfuscates network requests
  22. is a featured extension
  23. has random domains for exfil
  24. commits affiliate fraud