BadBlocker Adblock for YouTube Extension MAIN-World Session Cookie Theft

Ibrahim Saud@tektrix

•updated Jun 25, 2026•0•0•4

Detects the 'Adblock for YouTube' browser extension (specific ID cmedhionkhpnakcndndgjdbohmhepckk) performing suspicious file system operations related to the injection of remotely-fetched scriptlets into the browser's MAIN world. This activity is indicative of an attempt to bypass browser security boundaries to access session cookies, local/session storage, and login form data.