Threat Hunt: Info Stealer browser remote debugging execution

frog 🐸@frog

•updated Jul 18, 2025•3•3•57

Looking for processes executing chrome / edge with a remote debugging port, this is typically seen being leverage by info stealer malware to steal credentials. The remote debugging functionality can be used to obtain cookies without requiring keychain access.