#chrome — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #chrome, aggregated by home.social.
-
$100k in Crypto Drained by the Underground Operation
A cryptocurrency-stealing operation utilizing an Aotera/Tedy loader injects a Vidar-class stealer into Windows processes, launching Chrome or Edge to inject malicious scripts into victim sessions. The malware builder, dubbed Underground, has been active since October 2023. The operation employs seven gate domains and has drained approximately $100,000 across 80+ destination addresses on 23 blockchain networks from 350-430 victims. The infection begins with lure archives containing trojanized files, deploying a loader that implements anti-analysis checks against 67 monitoring tools. Once injected, the stealer automatically drains cryptocurrency exchange accounts through fake security overlays, converts holdings to Bitcoin, and modifies withdrawal confirmation emails. A clipboard clipper targeting two dozen cryptocurrencies replaces copied wallet addresses with operator-controlled addresses. The operation rotates Cloudflare-fronted domains faster than reputation-based detection can respond.
Pulse ID: 6abf599ea3419c5518645c45
Pulse Link: https://otx.alienvault.com/pulse/6abf599ea3419c5518645c45
Pulse Author: AlienVault
Created: 2026-10-02 07:13:34Be advised, this data is unverified and should be considered preliminary. Always do further verification.
-
$100k in Crypto Drained by the Underground Operation
A cryptocurrency-stealing operation utilizing an Aotera/Tedy loader injects a Vidar-class stealer into Windows processes, launching Chrome or Edge to inject malicious scripts into victim sessions. The malware builder, dubbed Underground, has been active since October 2023. The operation employs seven gate domains and has drained approximately $100,000 across 80+ destination addresses on 23 blockchain networks from 350-430 victims. The infection begins with lure archives containing trojanized files, deploying a loader that implements anti-analysis checks against 67 monitoring tools. Once injected, the stealer automatically drains cryptocurrency exchange accounts through fake security overlays, converts holdings to Bitcoin, and modifies withdrawal confirmation emails. A clipboard clipper targeting two dozen cryptocurrencies replaces copied wallet addresses with operator-controlled addresses. The operation rotates Cloudflare-fronted domains faster than reputation-based detection can respond.
Pulse ID: 6abf599ea3419c5518645c45
Pulse Link: https://otx.alienvault.com/pulse/6abf599ea3419c5518645c45
Pulse Author: AlienVault
Created: 2026-10-02 07:13:34Be advised, this data is unverified and should be considered preliminary. Always do further verification.
-
$100k in Crypto Drained by the Underground Operation
A cryptocurrency-stealing operation utilizing an Aotera/Tedy loader injects a Vidar-class stealer into Windows processes, launching Chrome or Edge to inject malicious scripts into victim sessions. The malware builder, dubbed Underground, has been active since October 2023. The operation employs seven gate domains and has drained approximately $100,000 across 80+ destination addresses on 23 blockchain networks from 350-430 victims. The infection begins with lure archives containing trojanized files, deploying a loader that implements anti-analysis checks against 67 monitoring tools. Once injected, the stealer automatically drains cryptocurrency exchange accounts through fake security overlays, converts holdings to Bitcoin, and modifies withdrawal confirmation emails. A clipboard clipper targeting two dozen cryptocurrencies replaces copied wallet addresses with operator-controlled addresses. The operation rotates Cloudflare-fronted domains faster than reputation-based detection can respond.
Pulse ID: 6abf599ea3419c5518645c45
Pulse Link: https://otx.alienvault.com/pulse/6abf599ea3419c5518645c45
Pulse Author: AlienVault
Created: 2026-10-02 07:13:34Be advised, this data is unverified and should be considered preliminary. Always do further verification.
-
New Version: #Google #Chrome 157.0.8082.0 (canary;x64) https://www.google.com/chrome/canary/
-
New Version: #Google #Chrome 157.0.8082.0 (canary;x64) https://www.google.com/chrome/canary/
-
#chrome extension The Evil Within - Face Up seems malicious. Its #cybersecurity badness score is 92/100!
```json
{"id": "cmaakmibipanaffnpnemkdagmpkcchlg", "score": 92, "platform": "chrome", "name": "The Evil Within - Face Up"}
``` -
#chrome extension The Evil Within - Face Up seems malicious. Its #cybersecurity badness score is 92/100!
```json
{"id": "cmaakmibipanaffnpnemkdagmpkcchlg", "score": 92, "platform": "chrome", "name": "The Evil Within - Face Up"}
``` -
#chrome extension The Evil Within - Face Up seems malicious. Its #cybersecurity badness score is 92/100!
```json
{"id": "cmaakmibipanaffnpnemkdagmpkcchlg", "score": 92, "platform": "chrome", "name": "The Evil Within - Face Up"}
``` -
#chrome extension Doom Eternal theme seems malicious. Its #cybersecurity badness score is 89/100!
```json
{"id": "manmmmhaiepbhcoifikogmjffoaacdlf", "score": 89, "platform": "chrome", "name": "Doom Eternal theme"}
``` -
#chrome extension Doom Eternal theme seems malicious. Its #cybersecurity badness score is 89/100!
```json
{"id": "manmmmhaiepbhcoifikogmjffoaacdlf", "score": 89, "platform": "chrome", "name": "Doom Eternal theme"}
``` -
#chrome extension Doom Eternal theme seems malicious. Its #cybersecurity badness score is 89/100!
```json
{"id": "manmmmhaiepbhcoifikogmjffoaacdlf", "score": 89, "platform": "chrome", "name": "Doom Eternal theme"}
``` -
CybersecKyle: I Built Drift to Share Articles and Passages to Mastodon. “Sharing a passage from an article can mean copying the quote, opening Mastodon, finding the article again for its title and URL, and assembling the post by hand. I wanted to highlight the part worth sharing, click an extension icon, and have those pieces waiting in an editable draft. That is the workflow behind Drift — […]
https://rbfirehose.com/2026/10/01/cyberseckyle-i-built-drift-to-share-articles-and-passages-to-mastodon/ -
CybersecKyle: I Built Drift to Share Articles and Passages to Mastodon. “Sharing a passage from an article can mean copying the quote, opening Mastodon, finding the article again for its title and URL, and assembling the post by hand. I wanted to highlight the part worth sharing, click an extension icon, and have those pieces waiting in an editable draft. That is the workflow behind Drift — […]
https://rbfirehose.com/2026/10/01/cyberseckyle-i-built-drift-to-share-articles-and-passages-to-mastodon/ -
CybersecKyle: I Built Drift to Share Articles and Passages to Mastodon. “Sharing a passage from an article can mean copying the quote, opening Mastodon, finding the article again for its title and URL, and assembling the post by hand. I wanted to highlight the part worth sharing, click an extension icon, and have those pieces waiting in an editable draft. That is the workflow behind Drift — […]
https://rbfirehose.com/2026/10/01/cyberseckyle-i-built-drift-to-share-articles-and-passages-to-mastodon/ -
#chrome extension American Odds Everywhere seems malicious. Its #cybersecurity badness score is 95/100!
```json
{"id": "imhabfamlbnipgkjpmjigmgdbohidiki", "score": 95, "platform": "chrome", "name": "American Odds Everywhere"}
``` -
#chrome extension American Odds Everywhere seems malicious. Its #cybersecurity badness score is 95/100!
```json
{"id": "imhabfamlbnipgkjpmjigmgdbohidiki", "score": 95, "platform": "chrome", "name": "American Odds Everywhere"}
``` -
#chrome extension American Odds Everywhere seems malicious. Its #cybersecurity badness score is 95/100!
```json
{"id": "imhabfamlbnipgkjpmjigmgdbohidiki", "score": 95, "platform": "chrome", "name": "American Odds Everywhere"}
``` -
#chrome extension TeamPulse Activity Tracker seems malicious. Its #cybersecurity badness score is 95/100!
```json
{"id": "jijpagjcjhicbiejgajjnbnlpibiggik", "score": 95, "platform": "chrome", "name": "TeamPulse Activity Tracker"}
``` -
#chrome extension TeamPulse Activity Tracker seems malicious. Its #cybersecurity badness score is 95/100!
```json
{"id": "jijpagjcjhicbiejgajjnbnlpibiggik", "score": 95, "platform": "chrome", "name": "TeamPulse Activity Tracker"}
``` -
#chrome extension TeamPulse Activity Tracker seems malicious. Its #cybersecurity badness score is 95/100!
```json
{"id": "jijpagjcjhicbiejgajjnbnlpibiggik", "score": 95, "platform": "chrome", "name": "TeamPulse Activity Tracker"}
``` -
#chrome extension Sports Betting Odds Finder seems malicious. Its #cybersecurity badness score is 88/100!
```json
{"id": "cnbhhgjkoboamkmoonajdclidaepgikd", "score": 88, "platform": "chrome", "name": "Sports Betting Odds Finder"}
``` -
#chrome extension Sports Betting Odds Finder seems malicious. Its #cybersecurity badness score is 88/100!
```json
{"id": "cnbhhgjkoboamkmoonajdclidaepgikd", "score": 88, "platform": "chrome", "name": "Sports Betting Odds Finder"}
``` -
#chrome extension Sports Betting Odds Finder seems malicious. Its #cybersecurity badness score is 88/100!
```json
{"id": "cnbhhgjkoboamkmoonajdclidaepgikd", "score": 88, "platform": "chrome", "name": "Sports Betting Odds Finder"}
``` -
#chrome extension TikTok View Bot seems malicious. Its #cybersecurity badness score is 96/100!
```json
{"id": "hkobeinmfiiihegbcflpmpnpdgdcciga", "score": 96, "platform": "chrome", "name": "TikTok View Bot"}
``` -
#chrome extension TikTok View Bot seems malicious. Its #cybersecurity badness score is 96/100!
```json
{"id": "hkobeinmfiiihegbcflpmpnpdgdcciga", "score": 96, "platform": "chrome", "name": "TikTok View Bot"}
``` -
#chrome extension TikTok View Bot seems malicious. Its #cybersecurity badness score is 96/100!
```json
{"id": "hkobeinmfiiihegbcflpmpnpdgdcciga", "score": 96, "platform": "chrome", "name": "TikTok View Bot"}
``` -
#chrome extension Doom Eternal seems malicious. Its #cybersecurity badness score is 86/100!
```json
{"id": "adhgmflfoijpfocklpgcghceadlpkola", "score": 86, "platform": "chrome", "name": "Doom Eternal"}
``` -
#chrome extension Doom Eternal seems malicious. Its #cybersecurity badness score is 86/100!
```json
{"id": "adhgmflfoijpfocklpgcghceadlpkola", "score": 86, "platform": "chrome", "name": "Doom Eternal"}
``` -
#chrome extension Doom Eternal seems malicious. Its #cybersecurity badness score is 86/100!
```json
{"id": "adhgmflfoijpfocklpgcghceadlpkola", "score": 86, "platform": "chrome", "name": "Doom Eternal"}
``` -
#chrome extension Coding Plan Dashboard seems malicious. Its #cybersecurity badness score is 87/100!
```json
{"id": "cadanfdgojoclmplhcnobkjchcecfdje", "score": 87, "platform": "chrome", "name": "Coding Plan Dashboard"}
``` -
#chrome extension Coding Plan Dashboard seems malicious. Its #cybersecurity badness score is 87/100!
```json
{"id": "cadanfdgojoclmplhcnobkjchcecfdje", "score": 87, "platform": "chrome", "name": "Coding Plan Dashboard"}
``` -
#chrome extension Coding Plan Dashboard seems malicious. Its #cybersecurity badness score is 87/100!
```json
{"id": "cadanfdgojoclmplhcnobkjchcecfdje", "score": 87, "platform": "chrome", "name": "Coding Plan Dashboard"}
``` -
#chrome extension The Evil Within - Its Hammer Time seems malicious. Its #cybersecurity badness score is 85/100!
```json
{"id": "eihmaimpjpomamfpemhkjpmejokcnicb", "score": 85, "platform": "chrome", "name": "The Evil Within - Its Hammer Time"}
``` -
#chrome extension The Evil Within - Its Hammer Time seems malicious. Its #cybersecurity badness score is 85/100!
```json
{"id": "eihmaimpjpomamfpemhkjpmejokcnicb", "score": 85, "platform": "chrome", "name": "The Evil Within - Its Hammer Time"}
``` -
#chrome extension The Evil Within - Its Hammer Time seems malicious. Its #cybersecurity badness score is 85/100!
```json
{"id": "eihmaimpjpomamfpemhkjpmejokcnicb", "score": 85, "platform": "chrome", "name": "The Evil Within - Its Hammer Time"}
``` -
#chrome extension PantryChef Flavor Injector seems malicious. Its #cybersecurity badness score is 98/100!
```json
{"id": "cecmiiiamjiklldkgnllopnlchnejaia", "score": 98, "platform": "chrome", "name": "PantryChef Flavor Injector"}
``` -
#chrome extension PantryChef Flavor Injector seems malicious. Its #cybersecurity badness score is 98/100!
```json
{"id": "cecmiiiamjiklldkgnllopnlchnejaia", "score": 98, "platform": "chrome", "name": "PantryChef Flavor Injector"}
``` -
#chrome extension PantryChef Flavor Injector seems malicious. Its #cybersecurity badness score is 98/100!
```json
{"id": "cecmiiiamjiklldkgnllopnlchnejaia", "score": 98, "platform": "chrome", "name": "PantryChef Flavor Injector"}
``` -
#chrome extension GitHub Filters seems malicious. Its #cybersecurity badness score is 86/100!
```json
{"id": "fpncfojakaoniabjokdgebiepabhljmd", "score": 86, "platform": "chrome", "name": "GitHub Filters"}
``` -
#chrome extension GitHub Filters seems malicious. Its #cybersecurity badness score is 86/100!
```json
{"id": "fpncfojakaoniabjokdgebiepabhljmd", "score": 86, "platform": "chrome", "name": "GitHub Filters"}
``` -
#chrome extension GitHub Filters seems malicious. Its #cybersecurity badness score is 86/100!
```json
{"id": "fpncfojakaoniabjokdgebiepabhljmd", "score": 86, "platform": "chrome", "name": "GitHub Filters"}
``` -
#chrome extension Ninja Turtles Cursor - TMNT Cursor Pack seems malicious. Its #cybersecurity badness score is 98/100!
```json
{"id": "djdaaghafdbopiighgoiicjmbgjpecen", "score": 98, "platform": "chrome", "name": "Ninja Turtles Cursor - TMNT Cursor Pack"}
``` -
#chrome extension Ninja Turtles Cursor - TMNT Cursor Pack seems malicious. Its #cybersecurity badness score is 98/100!
```json
{"id": "djdaaghafdbopiighgoiicjmbgjpecen", "score": 98, "platform": "chrome", "name": "Ninja Turtles Cursor - TMNT Cursor Pack"}
``` -
#chrome extension Ninja Turtles Cursor - TMNT Cursor Pack seems malicious. Its #cybersecurity badness score is 98/100!
```json
{"id": "djdaaghafdbopiighgoiicjmbgjpecen", "score": 98, "platform": "chrome", "name": "Ninja Turtles Cursor - TMNT Cursor Pack"}
``` -
#chrome extension The Loud House Cursor - Cartoon Cursor for Chrome seems malicious. Its #cybersecurity badness score is 96/100!
```json
{"id": "kecelcmfploggondgiojacddgmcbkbgo", "score": 96, "platform": "chrome", "name": "The Loud House Cursor - Cartoon Cursor for Chrome"}
``` -
#chrome extension The Loud House Cursor - Cartoon Cursor for Chrome seems malicious. Its #cybersecurity badness score is 96/100!
```json
{"id": "kecelcmfploggondgiojacddgmcbkbgo", "score": 96, "platform": "chrome", "name": "The Loud House Cursor - Cartoon Cursor for Chrome"}
``` -
#chrome extension The Loud House Cursor - Cartoon Cursor for Chrome seems malicious. Its #cybersecurity badness score is 96/100!
```json
{"id": "kecelcmfploggondgiojacddgmcbkbgo", "score": 96, "platform": "chrome", "name": "The Loud House Cursor - Cartoon Cursor for Chrome"}
```