Malicious 10xprofit Chrome Extensions Detected
Detects the presence of malicious Chrome extensions associated with the 10xprofit affiliate hijacking campaign. These extensions are installed as folders with the extension ID as the name in the user's browser profile directory. The rule identifies file events in common browser extension paths for Chrome and Edge, extracts the extension ID, and checks if it matches a known list of malicious IDs.
Microsoft Sentinel (KQL)
