BragJack: Hijacked Comet AI agent exfiltrates browser history/profile data

Arnold Chan@slaz

•updated Sep 17, 2026•0•0•4

Detects the Comet browser process, typically associated with AI-agent operations, accessing sensitive browser profile files (e.g., History, Bookmarks, Login Data, Cookies) followed by outbound network communication within a 15-minute window, excluding known legitimate paths.