attack.t1185 | Detection.FYI

Potential Data Stealing Via Chromium Headless Debugging

Oct 23, 2025 · attack.defense-evasion attack.credential-access attack.collection attack.t1185 attack.t1564.003 ·
Share on:

Detects chromium based browsers starting in headless and debugging mode and pointing to a user profile. This could be a sign of data stealing or remote control

Read More
Browser Started with Remote Debugging

May 20, 2025 · attack.credential-access attack.collection attack.t1185 ·
Share on:

Detects browsers starting with the remote debugging flags. Which is a technique often used to perform browser injection attacks

Read More