Home/ MITRE Matrix/ Persistence/ T1176.001

T1176.001Browser Extensions

T1176.001 — Browser Extensions is a MITRE ATT&CK technique in the Persistence tactic. Clankerusecase tracks 4 detection use cases covering it and 1 threat-intel article citing it.

Persistence

View on the matrix → Filter Detection Library MITRE official spec ↗

4Use cases

1Articles

0Sub-techniques

1Tactic

↑ Parent technique: T1176 · Software Extensions

Use cases covering this technique (4)

Windows Disable Internet Explorer Addons ESCU actions · hunting P [LLM] Jewelbug XG-Web native-messaging host 'com.microsoft.runedge' registered Bespoke install · alerting DSΣPDD [LLM] Browser directly spawning cmd.exe (XG-Web native-messaging shell) Bespoke c2 · hunting DSΣPDDCS [LLM] 'PDF Viewer' extension sideloaded into browser profile by non-browser process Bespoke install · hunting DSΣPDDCS

Articles citing this technique (1)

crit China-Linked Jewelbug Uses XG-Web for Government Espionage and Crypto Fraud art-49