Analytics BIOC Informational

Browser Extension Installed

Uncommon browser extension installed.

Module:
Platform Analytics
Data source:
XDR Agent with eXtended Threat Hunting (XTH)
ATT&CK tactics: Persistence (TA0003)
ATT&CK techniques: Software Extensions: Browser Extensions (T1176.001)
Detector tags: Chromium Extensions Analytics
Attacker's goals:

Establish persistent access to victim systems through Chromium-based browser, steal sensitive data such credentials, cookies hijacking and financial data.

Investigative actions:

Investigate the extension and how it was loaded. Check if this extension is currently present at the relevant extensions web store by looking up for its extension ID.

Test period:
N/A (single event)
Deduplication:
1 Day
1 variation:
  • Uncommon Browser Extension Installed Low (parent: Informational)