08-09-2026
PEEP: A Browser RAT Posing as a Chrome Extension
https://socradar.io/blog/peep-browser-rat-chrome-extension/
Report completeness: Medium
Threats:
Peep_tool
Redext_tool
Credential_harvesting_technique
Geo:
Hong kong, Chinese
TTPs:
Tactics: 8
Technics: 26
IOCs:
IP: 1
File: 14
Domain: 1
BrowserExtension: 5
Hash: 13
Soft:
Chrome, Node.js, Flask, Werkzeug, GoDaddy, Chromium, Linux
Algorithms:
zip, aes-256-gcm, hmac, aes, aes-gcm, exhibit, sha256
Functions:
getCookiesForDomain, getBrowsingHistory, getBookmarks, setTimeout
Languages:
powershell, python, javascript
Platforms:
cross-platform
Links:
https://github.com/Fir3n0x/GAP