Itbrief.Au

Comet AI Browser API Allows Unauthorized Device Control

First seen 2 Dec 2025, 18:33 UTC • Csoonline

+1 •87% similarity •10.7

Ask AI about this cluster

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

SquareX researchers have identified a hidden MCP API in the Comet AI browser that enables embedded extensions to execute local commands and potentially take full control of users' devices. This API circumvents traditional browser security measures, allowing unauthorized access to device resources without user consent.

ThreatCluster AI How this analysis works

Attack Flow

25 entities, 53 inferred relationships (STIX 2.1).

Technique (8)

Malware
Man-in-the-Middle
Phishing
Ransomware
Supply Chain Attack
Cross-site Scripting
Masquerading
T1557 - Adversary-in-the-Middle

Organization (2)

Perplexity
SquareX

Malware (3)

Comet
EchoGram
ShadowMQ

Affected Platform (5)

Perplexity.ai
Chromium
Comet AI Browser
Firefox
Safari

Threat Actor (1)

WannaCry

Tool (3)

Chrome
Agentic Extension
Analytics Extension

Vulnerability (3)

XSS
MCP API
Comet Browser Flaw

Relationships

WannaCry uses Comet
WannaCry uses EchoGram
WannaCry uses ShadowMQ
WannaCry uses Chrome
WannaCry uses Agentic Extension
WannaCry uses Analytics Extension
WannaCry uses Malware
WannaCry uses Man-in-the-Middle
WannaCry uses Phishing
WannaCry uses Ransomware
WannaCry uses Supply Chain Attack
Comet exploits XSS
Comet exploits MCP API
Comet exploits Comet Browser Flaw
EchoGram exploits XSS
EchoGram exploits MCP API
EchoGram exploits Comet Browser Flaw
ShadowMQ exploits XSS
ShadowMQ exploits MCP API
ShadowMQ exploits Comet Browser Flaw
Chrome exploits XSS
Chrome exploits MCP API
Chrome exploits Comet Browser Flaw
Agentic Extension exploits XSS
Agentic Extension exploits MCP API
Agentic Extension exploits Comet Browser Flaw
Analytics Extension exploits XSS
Analytics Extension exploits MCP API
Analytics Extension exploits Comet Browser Flaw
XSS targets Perplexity.ai
XSS targets Chromium
XSS targets Comet AI Browser
XSS targets Firefox
MCP API targets Perplexity.ai
MCP API targets Chromium
MCP API targets Comet AI Browser
MCP API targets Firefox
Comet Browser Flaw targets Perplexity.ai
Comet Browser Flaw targets Chromium
Comet Browser Flaw targets Comet AI Browser
Comet Browser Flaw targets Firefox
WannaCry targets Perplexity
WannaCry targets SquareX
Comet targets Perplexity
Comet targets SquareX
EchoGram targets Perplexity
EchoGram targets SquareX
ShadowMQ targets Perplexity
ShadowMQ targets SquareX
WannaCry related to Cross-site Scripting
WannaCry related to Masquerading
WannaCry related to T1557 - Adversary-in-the-Middle
WannaCry related to Safari

Community

Browse all →

Tracked Entities in This Story

WannaCry Comet EchoGram ShadowMQ Perplexity SquareX Perplexity.ai Chromium Comet AI Browser Firefox Safari

Comet AI Browser API Allows Unauthorized Device Control

Ask AI about this cluster

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Community

Continue Reading

Tracked Entities in This Story