SecuriTricks

VoidStealer: Debugging Chrome to Steal Its Secrets

VoidStealer is an emerging infostealer that employs a novel debugger-based Application-Bound Encryption (ABE) bypass technique. This method leverages hardware breakpoints to extract the v20_master_key directly from browser memory, requiring neither privilege escalation nor code injection. The techn…

infostealer

chrome

edge

2026-03-20

abe bypass

debugger-based technique

hardware breakpoints

memory analysis

v20_master_key extraction

voidstealer

Published: March 20, 2026

Downloadable IOCs: 1

4.3 Million Browsers Infected: Inside ShadyPanda's 7-Year Malware Campaign

A threat actor named ShadyPanda has been identified as responsible for a seven-year browser extension campaign that has infected 4.3 million Chrome and Edge users. The campaign includes two active operations: a 300,000-user RCE backdoor and a 4-million-user spyware operation. ShadyPanda's extension…

Published: December 3, 2025

Downloadable IOCs: 0

Google and Microsoft Trusted Them. 2.3 Million Users Installed Them. They Were Malware.

A coordinated campaign of 18 malicious browser extensions infected 2.3 million users across Chrome and Edge. These extensions, including a color picker tool, appeared legitimate with verified badges and high install counts. The RedDirection campaign implemented sophisticated browser hijacking mecha…

Published: July 10, 2025

Downloadable IOCs: 7

Inside Kimsuky’s Latest Cyberattack: Analyzing Malicious Scripts and Payloads

Kimsuky, also known as “Black Banshee,” a North Korean APT group active at least from 2012, is believed to be state-sponsored. Their cyber espionage targets countries like South Korea, Japan, and the U.S. Their tactics include phishing, malware infections (RATs, backdoors, wiper malware), supply ch…

64677cae14a2ec4d393a81548417b61b

Published: March 27, 2025

Downloadable IOCs: 0

Tag: edge

Attack reports

VoidStealer: Debugging Chrome to Steal Its Secrets

4.3 Million Browsers Infected: Inside ShadyPanda's 7-Year Malware Campaign

Google and Microsoft Trusted Them. 2.3 Million Users Installed Them. They Were Malware.

Inside Kimsuky’s Latest Cyberattack: Analyzing Malicious Scripts and Payloads