BadBlocker Adblock for YouTube Extension Session Cookie Theft via MAIN-World JS

Ibrahim Saud@tektrix

•updated Jun 25, 2026•0•0•2

Detects network activity associated with the 'Adblock for YouTube' Chrome extension (ID: cmedhionkhpnakcndndgjdbohmhepckk) as it retrieves malicious scripts from 'api.adblock-for-youtube.com'. These scripts are designed to access sensitive browser data, including session cookies, localStorage, and sessionStorage, and potentially interact with site-specific login form elements within the user's browser session.