BadBlocker Adblock for YouTube Extension Session Cookie Theft via api.adblock-for-youtube.com
Detects network activity originating from popular web browsers (Chrome, Chromium, Edge, Brave) directed towards known malicious or suspicious browser extension domains. This rule flags beaconing, API requests, and remote configuration fetches associated with potentially malicious or unwanted browser extensions.
Cortex XDR
