PIA Chrome extension tried to set Google Chrome.app as a Login item on macOS

So this is weird...
When we were installing the PIA Chrome extension  (1.5.10 from the chrome webstore, via PIA downloads page)) into Google Chrome (66.0.3359.181) on macOS (10.12.6) something odd happened....
We use a utility called BlockBlock(1) to monitor and log attempts to create 'Login Items' on the system.
Well, BockBlock alerted/logged an attempt to create a Login Item for Google Chrome.app during the extension set-up process.

/usr/sbin/cfprefsd installed a login item (/Users/REDACTED/Library/Preferences/com.apple.loginitems.plist ->
/Applications/Google Chrome.app)

Any thoughts in why this would happen?



(1) https://objective-see.com/products/blockblock.html
Sign In or Register to comment.