• CommunityEnterprisePlans
  • Intel Exchange
    Intel ExchangeDetections
  • Resources
  • About
  • Leaderboard
Join CommunitySign In
    All Detections

    BragJack: Comet browser AI agent reading files outside its sandbox profile

    avatar
    GlassDiceBearhttps://www.dicebear.comhttps://creativecommons.org/publicdomain/zero/1.0/„Glass” (https://www.dicebear.com) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)
    Arnold Chan@slaz
    •updated Sep 17, 2026•0•0•0

    Detects the 'Comet.exe' process, associated with the Perplexity Comet AI agent, accessing sensitive system files or configuration directories outside its expected scope. This pattern of file interaction is characteristic of unauthorized data collection or exfiltration attempts, specifically linked to the BragJack threat activity.

    Microsoft Sentinel (KQL)

    Tags

    T1005 - Data from Local SystemT1555 - Credentials from Password StoresTA0009 - CollectionFile AccessFile ModificationFile CreationCredential AccessWindowsWindows Defender Atpkql

    Found in

    • BragJack: Browser Extension Attack Hijacks AI AssistantsLast updated Sep 17, 2026
    • BragJack: Browser Extension Attack Hijacks AI AssistantsLast updated Sep 17, 2026
    • BragJack: Browser Extension Attack Hijacks AI AssistantsLast updated Sep 17, 2026
    • BragJack: Browser Extension Attack Hijacks AI AssistantsLast updated Sep 17, 2026
    • BragJack: Browser Extension Attack Hijacks AI AssistantsLast updated Sep 17, 2026

    Community Inspired.
    AI Enhanced.
    Better Detections.

    Follow Us

    Company

    • About
    • Leaderboard

    Product

    • Community
    • Enterprise
    • Plans

    © 2026 Copyright. All Rights Reserved.

    Privacy PolicyTerms of Service

    Sign up to view this detection

    or

    Already have an account?