AgtaBackup Credential Guard.exe accessing browser credential and cookie stores

ills3c Intel&Coffee@Ills3C

•updated 2 days ago•0•0•1

Detects the disguised binary 'Credential Guard.exe' accessing sensitive browser credential and cookie stores across common browsers (Chrome, Edge, Firefox, Brave, Opera), indicative of credential theft activity.