PEEP Turns Chrome and Edge Into Post-Compromise Backdoors for Host Command Execution

As cited

Copy frozen at 2026-09-07 19:25 UTC (site build).

threat intel

PEEP Turns Chrome and Edge Into Post-Compromise Backdoors for Host Command Execution

Researchers have disclosed PEEP, a post-exploitation toolkit disguised as a bookmarks extension for Chromium-based browsers. The malware requires prior administrative or remote code execution access, then injects itself directly into Chrome and Edge profiles while forging security mechanisms to bypass Web Store validation and user notifications.

Why it matters: Defenders managing Chrome and Edge deployments need to monitor for suspicious extension installations and unauthorized profile modifications, as PEEP establishes persistent backdoor access on already-compromised systems for command execution.

Source published

2026-09-07 18:12 UTC

First seen by Cybersecurity Tracker

2026-09-07 18:38 UTC