HOOKEDGE hidden Edge launched by cmd/script with webhook.site C2

ills3c Intel&Coffee@Ills3C

•updated 2 days ago•5•0•4

Detects Microsoft Edge (msedge.exe) spawned by command shells or script hosts with hidden or headless window parameters, or communicating with webhook.site, which is commonly indicative of malicious browser automation or exfiltration.