Detects browsers starting with the remote debugging flags. Which is a technique often used to perform browser injection attacks

Detects chromium based browsers starting in headless and debugging mode and pointing to a user profile. This could be a sign of data stealing or remote control