corpus.blog
42,281 blogs · 5,361,753 posts Claim your blog
Record · corpus.blog/posts/01a0be03-a3d4-73f4-bf49-b921a5853291

Moving up the Assemblyline: Exposing malicious code in browser extensions

Red Canary · published 12 March 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at redcanary.com Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
External links
24
Words captured
2,014

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://thehackernews.com/2025/12/trust-wallet-chrome-extension-hack.html
thehackernews.com
https://knowledge.workspace.google.com/admin/reports/chrome-log-events
knowledge.workspace.google.com
https://github.com/CybercentreCanada/assemblyline
github.com
https://www.koi.ai/blog/google-and-microsoft-trusted-them-2-3-million-users-installed-them-they-were-malware
koi.ai
https://www.darktrace.com/blog/cyberhaven-supply-chain-attack-exploiting-browser-extensions
darktrace.com
https://annex.security/blog/pixel-perfect/
annex.security
https://silocitylabs.com/post/2025/paperpanda-malicious/
silocitylabs.com
https://trustwallet.com/blog/announcements/trust-wallet-browser-extension-v268-incident-community-update
trustwallet.com
https://github.com/CybercentreCanada/assemblyline-service-jsjaws
github.com
https://github.com/CybercentreCanada/assemblyline-service-urlcreator/tree/0825a0ad5d103362ed9b7b272bef173a62c5d55e
github.com
https://github.com/CybercentreCanada/assemblyline-service-frankenstrings
github.com
https://github.com/CybercentreCanada/assemblyline-service-urlcreator/blob/0825a0ad5d103362ed9b7b272bef173a62c5d55e/urlcreator/network.py
github.com
https://github.com/CybercentreCanada/assemblyline-service-jsjaws/blob/9753a60ddcd4a5d1676ce1d411d08ccf00fa1c7f/signatures/decode.py
github.com
https://github.com/CybercentreCanada/assemblyline-service-frankenstrings/blob/a50f716721b26fd19ce9e6fd68b0091ff3609129/frankenstrings/frankenstrings.py
github.com
https://github.com/CybercentreCanada/assemblyline-service-jsjaws/blob/9753a60ddcd4a5d1676ce1d411d08ccf00fa1c7f/signatures/cookies.py
github.com
https://github.com/CybercentreCanada/assemblyline-service-jsjaws/blob/9753a60ddcd4a5d1676ce1d411d08ccf00fa1c7f/signatures/suspicious_process.py
github.com
https://github.com/CybercentreCanada/assemblyline-service-jsjaws/blob/9753a60ddcd4a5d1676ce1d411d08ccf00fa1c7f/service_manifest.yml
github.com
https://github.com/CybercentreCanada/assemblyline-service-jsjaws/blob/9753a60ddcd4a5d1676ce1d411d08ccf00fa1c7f/signatures/network.py
github.com
https://cybercentrecanada.github.io/assemblyline4_docs/installation/configuration/submission/
cybercentrecanada.github.io
https://github.com/CybercentreCanada/assemblyline-service-extract
github.com
https://github.com/CybercentreCanada/assemblyline-service-characterize
github.com
https://github.com/CybercentreCanada/assemblyline-service-deobfuscripter
github.com
https://github.com/CybercentreCanada/assemblyline-service-pixaxe
github.com
https://github.com/CybercentreCanada/assemblyline-service-urlcreator
github.com
Elsewhere on redcanary.com (3)