Kai Johnson
@KJohnson0 followers23 downloads12 copies3 likes234 views
2 detections
Filters
Last updated
All Time
Detection languages
2
Categories
1
1
1
1
Platforms
1
1
Products / Services
1
1
1
MITRE Techniques
2
2
1
1
1
Detects the installation of malicious browser extensions associated with the DarkSpectre threat actor, which includes the ShadyPanda, Zoom Stealer, and GhostPoster campaigns. Detection is based on known malicious extension IDs observed in file paths and registry keys for Chrome, Edge, and Firefox.
Detects network connections to domains associated with the DarkSpectre threat actor's campaigns, including GhostPoster, ShadyPanda, and The Zoom Stealer. These campaigns leverage malicious browser extensions for data theft, affiliate fraud, and corporate espionage.