Hostile 100% chrome 6 installs Download

WindAft 0.0.1

Search hijack, data exfiltration

“Quickly find articles and resources from top sources like sailinganarchy.com, sailingscuttlebutt.com, and yachtingworld.com by typing a spe…”

Extension couples external webpage messaging with default search hijackingSearch hijacker uploads host and search telemetry
SHA-256ee15e984ca9b13fe2b253e95ce024887eb433d6693e1fac859728321a1bf8b3b
URLhttps://clients2.google.com/service/update2/crx?response=redirect&prodversion=131.0&acceptformat=crx3&x=id%3Dlfgjmdjciokgldnaleebdmlhhlldilib%26installsource%3Dondemand%26uc
MaleculeO₃(CoSI)H₆(Br₆Cm₁₁Db₁₀FOsPo₂)Md₃(PaPm₄)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.