Skip to content
Threat Feed

Actor

Carbon Spider

1 brief RSS
Also known as: FIN7 Sangria Tempest DarkSide
high threat

Non-Chrome Process Accessing Chrome Default Directory

Detection of non-Chrome processes accessing the Chrome user data directory, potentially indicating credential theft or data exfiltration attempts by malware such as RATs or APT groups.

Splunk Enterprise +2 FIN7 +2 credential-access threat-type windows
2r 1t