BadBlocker Adblock for YouTube Extension Persistence with Broad Host Permissions
Detects the presence of known malicious variants of the 'Adblock for YouTube' Chrome browser extension within the user's Chrome extensions directory. These extensions are flagged for utilizing broad host permissions to maintain persistent silent access and potential remote code execution via fetched scriptlets.
Sigma
