Unraveling the Threat of Chrome Based Malware
summary
Analyzes how Chrome extensions can be abused for large-scale attacks by examining a real extension tied to a click-fraud campaign (200k+ users). Covers Chrome extension internals and attack techniques, includes demos and sample malicious extensions, and outlines detection, hunting, and control measures organizations can use to manage extension risk.
AI-written summary · about
chapters (15)
- 0:00Start
- 2:48Anatomy of an Extension
- 3:24Manifest File Deep Dive
- 5:26Google's Response on Security
- 7:29Overview
- 9:59Web Socket Tunnel
- 12:41What Makes Chrome Extensions Good For Offense?
- 14:46Post Exploitation Injection Technique
- 15:08Hooking Form Submission
- 16:56Tab Screenshots
- 19:50MITRE ATTACK
- 20:45Extension Footprint
- 21:43OS Query - Hunting
- 23:32Approaches
- 25:04Research Extensions / What's Next?
related talks
36mBuilding your first malicious chrome extension 😈
45mThe evil friend in your browser
31mBuilding your first malicious chrome extension 😈
31mShadow IT Battlefield: The CyberHaven Breach and...
25mExtension Breakdown...
54mCrafting the next-generation Man-in-the-Browser Trojan
01h 02mBrowser Extensions: Threat or Danger?
21mChrome Extension Risks and You