AstarionRAT - SQLite Browser Database Scraping (T1555.003)

Ibrahim Saud@tektrix

•updated Jun 23, 2026•0•0•4

Detects AstarionRAT's infostealing capability rapidly accessing multiple Chromium and Firefox SQLite databases to steal credentials and cookies.