Skip to content
Threat Feed
Subscribe

Actor

DUCKTAIL

1 brief RSS
high threat

Suspicious File Download via Headless Browser

The DUCKTAIL threat actor leverages Chromium-based web browsers (such as Microsoft Edge and Chrome) running in headless mode with the `--dump-dom` argument to stealthily download malicious content from the internet via suspicious file-sharing domains, impacting compromised endpoints.

Brave Browser +4 DUCKTAIL headless-browser file-download data-exfiltration malware-delivery endpoint network
1r 2t 26i