The Gentlemen - Chrome Credential Theft Tool

Georg Lauenstein@gsec

•updated Mar 27, 2026•1•0•58

Detects execution of ChromeKB3.exe, a custom tool developed by The Gentlemen for extracting saved passwords from Google Chrome via AppBound injection (SHA256: 2834114ff7e487c4ca3f50ca39f7d652dea1be98f885c388f01b6ff35309307b).