Miasma/MYRA: node.exe Accessing Browser Credential and Cookie Stores

Ibrahim Saud@tektrix

•updated Jun 30, 2026•0•0•0

Detects instances where a Node.js process accesses or modifies browser-related credential, cookie, or configuration files. This behavior is indicative of unauthorized data collection or credential harvesting from locally stored web browser profiles.