PEEP Turns Chrome and Edge Into Post-Compromise Backdoors for Host Command Execution

Researchers have revealed a post-exploitation toolkit called PEEP that targets Chromium-based browsers, disguising itself as a bookmarks extension. PEEP requires administrative or code execution access to install, and it injects the extension into Chrome and Edge profiles. This injection bypasses the usual Web Store checks and user prompts by mimicking Chromium's Secure Preferences. The toolkit enables host command execution, effectively turning the browsers into backdoors. PEEP's installation method allows it to operate without being detected by standard security measures. The toolkit's complexity and ability to evade detection make it a significant threat.