Malicious Chrome Extension with wasm-unsafe-eval CSP - flkebkiofojicogddingbdmcmkpbplcd

Ibrahim Saud@tektrix

•updated Jun 30, 2026•0•0•0

Detects modifications or creations of manifest.json files within specific directories associated with a browser extension. This behavior is often indicative of the installation or tampering of browser extensions by malicious actors to establish persistence, perform credential theft, or execute unauthorized actions within the browser context.