PEEP Weaponizes Chrome and Edge for Host Command Execution

PEEP weaponizes Chrome and Edge for host command execution

A newly documented post-compromise technique dubbed PEEP turns Google Chrome and Microsoft Edge into backdoors for executing commands on the underlying host. The method leverages already-installed browsers after initial access...

PEEP Malware Turns Chrome, Edge Into Backdoors

PEEP malware turns compromised Chrome and Edge browsers into persistent backdoors for credential theft, session hijacking, and host command execution. The post PEEP Turns Chrome, Edge Into Post-Compromise Backdoors appeared first on eSecurity Planet.

A Fake Bookmark Manager Extension Is Turning Chrome Into a Backdoor

SOCRadar researchers uncovered PEEP, a malicious Chrome and Edge extension disguised as a bookmark manager called Smart Bookmarks, that forges Chromium's Secure Preferences file to install silently and uses a native-messaging bridge to run OS-level commands on infected Windows machines. The tool steals session cookies, screenshots, and clipboard data, beaconing every 30 seconds to Hong Kong-based infrastructure tied to a Chinese-speaking threat …

PEEP Malware: Chrome Extension Hijacks Browsers, Steals Data

Researchers at SOCRadar uncovered a Chrome/Edge post-exploitation toolkit called PEEP that masquerades as a “Smart Bookmarks” extension. The malware bypasses […]

PEEP Turns Chrome and Edge Into Post-Compromise Backdoors for Host Command Execution | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #ransomware - National Cyber Security Consulting

Cybersecurity researchers have disclosed details of a complex Chromium-based post-exploitation toolkit called PEEP that masquerades as a bookmarks extension for the web browser. "Requiring prior administrative or code execution access, its installer injects the extension directly into Chrome/Edge profiles, bypassing Web Store checks and user prompts by forging Chromium's own Secure Preferences integrity values," SOCRadar […] Thank you for subscr…