ForgCookie extension loaded in Chromium browser or Forg365 backend contact

ills3c Intel&Coffee@Ills3C

•updated 2 days ago•5•0•5

Detects indicators related to the ForgCookie/Forg365 browser extensions and associated backend communications across Chromium-based browsers (Chrome, Edge, Brave). The rule monitors process execution command lines for extension loading flags, network connections to URLs containing 'forg365', and file creation activities within browser extension directories.