Chrome Launched with CDP Remote-Debugging Flags on Fixed Port 18907 (XCSSET)

Duo Tech@duotech

•updated Jul 31, 2026•0•0•9

Detects Google Chrome launched with Chrome DevTools Protocol (CDP) remote-debugging flags on the fixed port 18907 used by XCSSET's persistence/browser-hijacking component, excluding known browser-automation tooling.