Hostile 100% firefox Download

Tr Wale 16.2.9

Clipboard exfiltration to hidden IP

“Your personal extension. Easy to use.”

False no-data claim with clipboard exfiltrationBrowser clipboard chunks sent over HTTP
SHA-256ccebbbf82ad30b227a7da3507c697d3eba92d4ded7f452b767fab5c460bbf5de
URLhttps://addons.mozilla.org/firefox/downloads/file/5056440/tr_wale-16.2.9.xpi
MaleculeO₄(ErEuAsCa)H₆(Br₃Cm₈Db₁₃Os₃PoU₈)Md₄(Pa₂Pm₂Si)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.