#chromeextension — Public Fediverse posts

PEEP: A Browser RAT Posing as a Chrome Extension

PEEP is a Chromium-based post-exploitation toolkit disguised as 'Smart Bookmarks' that transforms Chrome and Edge browsers into persistent backdoors. Requiring prior administrative access, it bypasses Web Store security by forging Chromium integrity values and uses native-messaging to extend beyond browser telemetry to full host-level command execution. The malware beacons every 30 seconds over unencrypted HTTP, exfiltrating browsing history, cookies, credentials, and session data. Built on the open-source RedExt framework with significant enhancements, PEEP combines browser surveillance with filesystem manipulation, shell command execution, and process discovery. The infrastructure exposed development artifacts including source code, signing keys, and Traditional Chinese testing logs, indicating a Chinese-speaking operator using AI-assisted development. The toolkit demonstrates sophisticated persistence through HMAC forgery, enterprise policies, and ScriptCache manipulation.

Pulse ID: 6a9eb13dfccfac432c46d96e
Pulse Link: https://otx.alienvault.com/pulse/6a9eb13dfccfac432c46d96e
Pulse Author: AlienVault
Created: 2026-09-07 12:42:37

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#BackDoor #Browser #Chinese #Chrome #ChromeExtension #Cookies #CyberSecurity #Edge #GRIT #HTTP #InfoSec #Mac #Malware #OTX #OpenThreatExchange #RAT #RCE #bot #AlienVault

Malicious Chrome Extension Can Steal Login Sessions and Turn PCs Into Remote Backdoors

Indicators extracted from public reporting. Source: https://socradar.io/blog/peep-browser-rat-chrome-extension/

Pulse ID: 6a9e7c2ce1129dcc5ae37c04
Pulse Link: https://otx.alienvault.com/pulse/6a9e7c2ce1129dcc5ae37c04
Pulse Author: CyberHunter_NL
Created: 2026-09-07 08:56:12

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#BackDoor #Browser #Chrome #ChromeExtension #CyberSecurity #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #RAT #RCE #bot #CyberHunter_NL

Ah, yet another Chrome extension that promises to liberate your text from the tyrannical clutches of un-copyable documents! 🎉 Just pin, #OCR, and hope the #Tesseract doesn't rebel while you awkwardly fumble with hotkeys like a tech-savvy octopus. 🐙👀 Meanwhile, GitHub is busy wooing developers with AI charm while your text is still stuck in a #PDF. 🖨️🔍
https://github.com/thiagotigaz/ocr-it #ChromeExtension #GitHubAI #HackerNews #ngated

Inside Kimsuky's Abuse of Legitimate Remote Control Tools Across Northeast Asia

Kimsuky conducted spear phishing campaigns against South Korean and Japanese targets during the first half of 2026, distributing LNK malware through OneDrive share links. The malicious files established scheduled tasks that periodically fetched PowerShell scripts from command-and-control servers to profile systems, exfiltrate Thunderbird and Outlook email data, and log keystrokes. The threat actor installed legitimate remote control software including Chrome Remote Desktop and AnyDesk to evade antivirus detection and maintain multiple access channels. A malicious Chrome extension designed to steal Gmail data exhibited characteristics of AI-generated code, featuring Korean comments, debug strings, and Unicode emoji throughout. The operation employed rotating infrastructure and compromised legitimate Korean servers as command-and-control nodes to impede tracking efforts.

Pulse ID: 6a873495a873c0ec3c6d9880
Pulse Link: https://otx.alienvault.com/pulse/6a873495a873c0ec3c6d9880
Pulse Author: AlienVault
Created: 2026-08-20 17:08:37

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#AnyDesk #Asia #Chrome #ChromeExtension #CyberSecurity #EDR #Email #ICS #InfoSec #Japan #Kimsuky #Korea #LNK #Malware #OTX #OpenThreatExchange #Outlook #Phishing #PowerShell #RAT #SouthKorea #SpearPhishing #UK #bot #AlienVault

🤖🔥 Oh joy, AI-generated drivel is suffocating LinkedIn like never before! Someone finally created a Chrome extension to filter the endless stream of corporate nonsense – too bad it won't help you escape the abyss of motivational platitudes and business buzzword bingo! 🚀💼
https://www.pangram.com/blog/ai-in-your-feed #AIgeneratedContent #LinkedInFilter #CorporateNonsense #BuzzwordBingo #ChromeExtension #HackerNews #ngated

pretty awesome bookmarking tool, using it a lot to stash current event articles among other things. auto tagging and full page archival and / screenshotting

iOS / Android app & chrome extension!

https://github.com/hoarder-app/hoarder

https://hoarder.app/

#PrettyAwesome #BookmarkingTool #AutoTagging #FullPageArchival #Screenshotting #iOSApp #AndroidApp #ChromeExtension #HoarderApp

there's a chrome extension that i'd like to see not become abandonware.  what can I do?  or is there anything that can be done?  

the extension is called "favorites - new tab page"

chrome web store link -

https://chromewebstore.google.com/detail/favorites-new-tab-page/kjkbcegjfanmgocnecnngfcmmojheiam

youtube video -

https://www.youtube.com/watch?v=8iMwFhFN6qw

#saveabandonware
#savefavoritesnewtabpage
#abandonware
#chromeextension
#chromeextensions
#favoritesnewtabpage
#savefavoritesnewtabpage
-
#favorites
#bookmarks
#internetlauncher
#internetlaunchpad
#chrome
#chromebrowser
#google
#chromeos
#chromebook
#chromeextension
#chromeextensions
#manifestv3
#manifestv2
#googlechrome
#chromeos128
#chromeos129
#chromeos130
#thefutureofchromeOS
#chromeosmarketshare
#chromebookmarketshare
#futureofchromebook
#futureofchromeos
#chromeos131
#chromeos132
#chrome128
#chrome129
#chrome130
#chrome135
#chrome140
#chromeos135
#chromeos140
#computer
#laptop
#desktop
#desktopcomputer
#desktopcomputing

What do you think of this extension for desktop chrome browser? - Its your existing bookmarks, but instead of a tiny sliver, you get a nice full screen grid layout with icons imported automatically, also allows drag and drop. you can also right click settings > themes > choose any dark background for a night mode / dark theme, easier on the eyes.

https://chromewebstore.google.com/detail/favorites-new-tab-page/kjkbcegjfanmgocnecnngfcmmojheiam

If we could call the developer, contact them, could we ask them to open source their software and put it up on GitHub?

https://chromewebstore.google.com/detail/favorites-new-tab-page/kjkbcegjfanmgocnecnngfcmmojheiam

#opensource
#chrome
#chromeextension
#chromeextensions
#internet
#accessibility
#enjoyment
#usability
#gui
#graphicaluserinterface
#web
#favicons
#launcher
#weblauncher
#bookmarks
#favorites
#favoritesnewtabpage

draft - Favorites New Tab Page extension - how about an option to lock the layout unless we right click and choose edit?

#chrome
#chromebook
#chromebrowser
#favorites
#favoritesnewtabpage
#internet
#bookmarks
#webbrowser
#weblauncher
#chromewebstore
#chromeos
#chromeextension
#chromeextensions
#google
#googlechrome
#noplacelikechrome
#theresnoplacelikechrome
#chromebookplus
#8gbram
#corei3
#chromeos127
#chromeos128
#10yearsofchromebookupdates
#usbc
#usb4
#android
#android15
#pixel
#pixel8
#pixel9
#chromeos129
#chromeos130
#novalauncher
#newtabpage