Utopia Tech
Security1 min read

PEEP Turns Chrome and Edge Into Post-Compromise Backdoors for Host Command Execution

Cybersecurity researchers have disclosed details of a complex Chromium-based post-exploitation toolkit called PEEP that masquerades as a bookmarks extension for the web browser. "Requiring prior administrative or code execution access, its installer injects the extension directly into Chrome/Edge profiles, bypassing Web Store checks and user prompts by forging Chromium's own Se

UT

Utopia Tech

September 7, 2026 · 1 min read

Share

Cybersecurity researchers have disclosed details of a complex Chromium-based post-exploitation toolkit called PEEP that masquerades as a bookmarks extension for the web browser. "Requiring prior administrative or code execution access, its installer injects the extension directly into Chrome/Edge profiles, bypassing Web Store checks and user prompts by forging Chromium's own Secure Preferences

Originally published at thehackernews.com

#Cybersecurity#Malware#Vulnerabilities
Share
▸ Want a deeper look?

Talk to an architect about applying this to your stack.

60-minute technical evaluation, no obligation. We'll map the ideas in this article to your environment.

Schedule the call
▸ Continue reading

More from the journal

⚡ Weekly Recap: Chrome 0-Day, Router Hijacks, Coder Supply Chain Attack and More
Security

⚡ Weekly Recap: Chrome 0-Day, Router Hijacks, Coder Supply Chain Attack and More

1 min read

Fake IT Calls Target Executives in Microsoft 365 Data Theft and Extortion Attacks
Security

Fake IT Calls Target Executives in Microsoft 365 Data Theft and Extortion Attacks

1 min read

Rogue ScreenConnect Clients Spread Four-Stage VBScript Chain to Newly Connected Hosts
Security

Rogue ScreenConnect Clients Spread Four-Stage VBScript Chain to Newly Connected Hosts

1 min read

All posts
Skip to main content