MiniBrowse Browser Credential Store Access

Ibrahim Saud@tektrix

•updated Jul 2, 2026•4•0•12

This rule detects the execution of processes named 'MiniBrowse' or access attempts to common web browser credential storage files (Google Chrome 'Login Data', Microsoft Edge 'Login Data', and Mozilla Firefox 'logins.json' or 'key4.db'). These patterns are characteristic of browser credential stealing malware or unauthorized data collection tools.