---
id: 9383
title: "Attack of The Extensions"
source_domain: specterops.io
source_url: "https://specterops.io/blog/2026/08/13/chromium-extension-c2-persistence/"
published_at: "2026-08-13T16:00:00Z"
phying_url: "https://phying.com/item/9383"
lang: en
---

# Attack of The Extensions

## Summary

Learn how Chromium browser extensions can be silently sideloaded to establish persistent C2 access and how to detect it with Sysmon.

## Intelligence Metadata

- **Sources:** specterops.io
- **Published:** 2026-08-13T16:00:00Z
- **Original:** https://specterops.io/blog/2026/08/13/chromium-extension-c2-persistence/
- **Phying News:** https://phying.com/item/9383