TA4922 Chromium Login Data and Cookies Access by Non-Browser Process

Ibrahim Saud@tektrix

•updated Jun 30, 2026•0•0•1

Detects unauthorized processes attempting to access sensitive browser files such as Login Data, Cookies, or Web Data for Google Chrome or Microsoft Edge. This activity is indicative of credential theft, where malicious actors attempt to extract stored passwords or session cookies from web browsers.