Detection of ModHeader Browser Extension Artifacts

F S@Fsdr

•updated Jul 14, 2026•24•1•37

This rule monitors for file-level artifacts related to the ModHeader browser extension, specifically targeting folder paths and file names that match the extension's unique ID. This is typically used to identify the installation or download of this extension, which has been associated with malicious activity.