guardian of wavesmiley (@jack.cab)

Browser extension malware analysis - using browser-xpi-malware-scanner.py to find malware in the wild Deep-dive static analysis of a malicious Firefox extension that hides its C2 configuration in a PNG trailer, evades AV scanners via Unicode low-byte encoding, hijacks Taobao/JD.com affiliate commissio... https://www.yourdev.net/blog.php?post=extension-malware-in-the-wild