PEEP Turns Chrome and Edge Into Post-Compromise Backdoors for Host Command Execution

Summary

Cybersecurity researchers have disclosed details of a complex Chromium-based post-exploitation toolkit called PEEP that masquerades as a bookmarks extension for the web browser. "Requiring prior administrative or code execution access, its installer injects the extension directly into Chrome/Edge profiles, bypassing Web Store checks and user prompts by forging Chromium's own Secure Preferences

Lotu Radar provides attributed news summaries and links to the original publisher. Full reporting and copyright remain with the source.