Large Outbound Data Transfer from Headless Chrome/Edge with Remote Debugging

Duo Tech@duotech

•updated Jul 24, 2026•8•0•8

Anomalously large outbound transfers over the WebRTC DataChannel from a Chrome/Edge process launched with --headless and --remote-debugging-port flags (no visible window), indicating exfiltration rather than routine interactive or automation-only browser use.