Hostile 92% chrome Download

Costras Extension 1.0.5

Steals Twitter auth tokens

“Twitter Bot Connector is the most secure and user-friendly way to connect your Twitter/X account to our advanced SaaS bot platform. Designe…”

Maps and POSTs cookies to remote hostAccess-token field reference
SHA-2560019b33ab133b981a1d9573809a51c289a0af9770276d0417f0c0eb6689d9bb4
URLhttps://clients2.google.com/service/update2/crx?response=redirect&prodversion=131.0&acceptformat=crx3&x=id%3Dmnegdfmbhfmahjhhgibhpabkmobleikk%26installsource%3Dondemand%26uc
MaleculeO₂(EuCo)H₈(Br₁₄Cm₂₃Db₆HfOsPo₂Ti₂U₆)Md₂(Pm₅)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.