Golden Chickens Launches Four Modular Malware Families to Steal Chrome Credentials and Hijack Browser Sessions

Gbhackers •Mayura Kathir • July 24, 2026

Golden Chickens, tracked as TAG-195 and also known as Venom Spider, has launched four new modular malware families designed to enhance credential theft, browser session hijacking, and post-exploitation flexibility. The newly identified families TinyEgg, ChonkyChicken, a modularized ChonkyChicken variant, and ChromEggscalator mark a clear architectural evolution in the group’s malware-as-a-service (MaaS) ecosystem, signaling a shift […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Golden Chickens Unveils Four New Modular Malware Families Targeting Chrome Credentials TAG-195, also known as Golden Chickens or Venom Spider, has launched four new malware families: TinyEgg, ChonkyChicken, a modular variant of ChonkyChicken, and ChromEggscalator. These families are designed to enhance credential theft and browser session hijacking capabilities. The malware utilizes ClickFix-style lures to trick victims into executing malicious commands. TinyEgg serves as a lightweight backdoor, while ChonkyChicken expands functionality to include browser credential theft and network reconnaissance. The modular architecture allows for selective provisioning of capabilities, reducing detection risks. Insikt Group has linked TAG-195 to previous operations and warns defenders to prioritize detection of specific execution chains and unusual communications. The malware primarily targets Windows systems. 5 sources 68

Extracted Entities

Golden Chickens Launches Four Modular Malware Families to Steal Chrome Credentials and Hijack Browser Sessions

The full story

Extracted Entities

APT Groups (2)

Attack Types (1)

Malware (3)

MITRE ATT&CK (1)

Tools (1)