AmnesiaStealer rapid multi-extension storage enumeration by non-browser process

Duo Tech@duotech

•updated Aug 19, 2026•1•0•3

Detects rapid enumeration of browser extension storage (Local Extension Settings, IndexedDB) across multiple profiles by a non-browser process, matching AmnesiaStealer's generic cryptocurrency wallet-harvesting technique.