Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Hannibal Stealer vs. Browser Security

netlas.io | blog | #malware | #browser-security | #chrome | #infostealer | #evasion | #cookie-theft

Summary

A case study of Hannibal Stealer's attacks on browser security: how it bypasses Chrome's v20 app-bound cookie encryption via process injection to harvest session cookies, plus countermeasures.
Published
Collected

original ↗

Related coverage

blog · crowdstrike.com
PhantomRaven: An LLM-Generated Information Stealer Developed for Bug Bounty Hunting
CrowdStrike identified a financially motivated threat actor who works as a bug bounty hunter and who developed and distributed the JavaScript-based information stealer PhantomRaven.
blog · projectzero.google
When ‘int’ is the new ‘short’
A short Google Project Zero post describing an interesting Chrome issue the author discovered last month and how it was found.
research · portswigger.net
Abusing Chrome's XSS auditor to steal tokens
Gareth Heyes abuses Chrome's XSS Auditor block mode as a side-channel oracle, brute-forcing values such as user IDs embedded in inline scripts and stealing tokens. Includes working PoC code.
research · portswigger.net
Exposing Intranets with reliable Browser-based Port scanning
Gareth Heyes builds a reliable browser-based port scanner, distinguishing open ports via Chrome's chrome-error:// behavior and counting iframe onload events.
research · nebusec.ai
Check Your Motor Oil Before Turbocharging: CVE-2026-7899, When V8's Optimization Engine Builds Up Carbon
This research reveals deep compiler-level optimization pitfalls in modern JIT/WASM engines that lead to renderer sandbox escapes.
Medium · vulnerability · pwn.ai
CVE-2026-14077: Select Your Own Origin - Spoofing Chrome's Address Bar
pwn.ai's CVE-2026-14077: an HTML select positioned partly above the viewport let a page draw native UI over Chrome's toolbar, spoofing the omnibox for a convincing fake download flow.
back