Extension Beacon Exfiltrating Local Hostname Shortly After Activation
Detects HTTP network traffic containing the endpoint's local hostname transmitted within 30 seconds of a process starting, consistent with 'evil twin' Open VSX extensions that harvest developer environment metadata immediately upon activation.
Cortex XDR
