how do attackers use fake browser extensions to steal credentials and how can our team protect our crypto assets
Download run
Fan-out diagram
The searches the AI actually ran for this prompt.
SEED QUERY
how do attackers use fake browser extensions to steal credentials and how can our team protect our crypto assets
3 real searches · 1 real-search pass
CISA browser extensions security malicious extensions enterprise browser extension permissions guidanceGoogle ↗
OBSERVED
Google Chrome enterprise extension management blocklist force install extension permissions securityGoogle ↗
OBSERVED
MITRE ATT&CK browser extensions credential theft session cookies extension malware crypto wallet securityGoogle ↗
OBSERVED
Badge and edge weight = share of passes that produced the query. Hover a query for its intent and routing format.
Query classes
Google's semantic query class for every sub-query: what kind of answer each search is after, simulated vs real.
Classifying 3 queries…
Searches and sources
ChatGPT3 real searches · gpt-6
CISA browser extensions security malicious extensions enterprise browser extension permissions guidance Google ↗
Google Chrome enterprise extension management blocklist force install extension permissions security Google ↗
MITRE ATT&CK browser extensions credential theft session cookies extension malware crypto wallet security Google ↗
- Software Extensions: Browser Extensions, Sub-technique T1176.001 - Enterprise · attack.mitre.org
- Software Extensions, Technique T1176 - Enterprise · attack.mitre.org
- Steal Web Session Cookie, Technique T1539 - Enterprise · attack.xn--zsss51h.xn--rhqv96g
- Browser Session Hijacking, Technique T1185 - Enterprise · attack.mitre.org
- MITRE ATT&CK — Steal Web Session Cookie · attack.mitre.org
- MITRE ATT&CK — Credentials from Web Browsers · attack.mitre.org
Queries
3 queries · click a column to sort
| Query / type | Search | Intent | Query class | Routing format | Cluster | Freq ↓ | Weight |
|---|---|---|---|---|---|---|---|
CISA browser extensions security malicious extensions enterprise browser extension permissions guidance OBSERVED | Google ↗ AI Mode ↗ | — | — | — | — | 1x of 1 | |
Google Chrome enterprise extension management blocklist force install extension permissions security OBSERVED | Google ↗ AI Mode ↗ | — | — | — | — | 1x of 1 | |
MITRE ATT&CK browser extensions credential theft session cookies extension malware crypto wallet security OBSERVED | Google ↗ AI Mode ↗ | — | — | — | — | 1x of 1 |