Suspicious In-Memory Blob Generation via JS

Elgonad .@elgonad

•updated Apr 20, 2026•2•0•157

Detects the presence of specific JavaScript functions used to generate and handle Blob objects in memory. This technique is utilized by the BlobPhish campaign to keep the phishing payload in memory, thereby evading file and network scanning.