Monday 06 July 2026 00:39:10 GMT+02:00
Netcrook
#Native Messaging
When a Browser Extension Starts Talking Back: The Windows Command Channel Hiding in Plain Sight
A phishing-led malware chain reportedly used Chrome’s native messaging path to move from browser space into Windows command execution, showing how ordinary integrations can become security boundaries in practice.
Chrome’s Trust Model Becomes the Attack Surface in a Windows Extension Campaign
A campaign abusing policy-controlled installs and Native Messaging shows how a browser can be turned into a command relay when trusted management features are misused.
Fake Outlook Page, Real Endpoint Risk: The Browser Backdoor Playbook Behind Edgecution
A lookalike update portal and a malicious Edge extension show how a browser lure can turn into a path toward local process control when native messaging is in play.
When a Browser Add-On Crosses the Line Into Host Control
A malicious Edge extension linked to a Python backdoor shows how native messaging can turn a browser convenience feature into a bridge toward endpoint-level abuse.