Tag: chrome devtools protocol
3 articles
AI Agents Operate in Browsers with Hidden Access
Meet the sneaky side of AI agents: they can now operate quietly within your browser, using tools like the Chrome DevTools Protocol to navigate sites, extract info, and interact with web apps - all while hiding in plain sight. This stealthy access poses a significant security risk, allowing external apps to hijack your authenticated sessions.
Researchers Expose Chrome DevTools Protocol Hijacking Technique
Google warns that attackers are exploiting Chrome Remote Debugging to steal cookies, and now researchers have developed a new technique to activate DevTools inside a live browser, allowing for even easier cookie extraction. This technique uses a Beacon Object File to tap into the Chrome DevTools Protocol, posing a new threat to users.
Chaos Ransomware Exploits Headless Browsers for Covert C2 Traffic
Cisco Talos uncovered a sneaky tactic used by Chaos Ransomware, where a Rust implant called msaRAT hijacks a victim's browser to disguise its communications, making it look like they're coming from a legitimate browser process. This clever trick lets the malware fly under the radar by using the Chrome DevTools Protocol to control the browser.