ChocoPoC slogsec/logcrypt Browser Credential Theft via Python

Ethan Andrews@eandrews

•updated Jul 1, 2026•1•0•1

Detects Python processes (potentially associated with the ChocoPoC RAT, slogsec, or logcrypt modules) performing file read or access operations against common browser credential store files such as Login Data, Cookies, and Web Data on Windows and macOS systems.