StegoAd Browser Extension 2FA/Credential Exfiltration to mitarchive.info

Ibrahim Saud@tektrix

•updated Jun 29, 2026•0•0•2

Detects network communication to the malicious domain 'mitarchive.info' from common web browsers (Chrome, Edge, Firefox, Brave). This domain is associated with the StegoAd browser extension, which intercepts Google and WordPress login flows to exfiltrate stolen credentials and 2FA codes.