Skip to content
Product
Threat intelligence API
Free key, 70+ endpoints, OpenAPI. The product.
Get started
Pick your stack, make your first call.
Live feed
The console: incidents, filters, entities, search.
Public IOC feed
Free blocklists: domains, IPs, hashes, wallets. No key.
Dark web
First-party leak-site collection: victims and groups.
CLI & agents
tc from a terminal; agent keys with scoped budgets.
Docs
Pricing
No results found
Sign in
Get a free key
No results found
Product
Threat intelligence API
Get started
Live feed
Public IOC feed
Dark web
CLI & agents
Docs
Pricing
Contact
Get a free key
Sign in
Back
HashJack
Vulnerability
Threat entity extracted from intelligence sources
Entities
›
vulnerability
›
HashJack
Frequency
3
occurrences
First Seen
November 26, 2025
Last Seen
October 5, 2026
API
Overview
Recent Events
Profile
Profile
MITRE ATT&CK
1 / 2
Exploited By
ShadyPanda
Associated Malware
Comet
GhostPoster
Tools Used
Chrome
MITRE Techniques
T1041 - Exfiltration Over C2 Channel
T1071 - Application Layer Protocol
T1195 - Supply Chain Compromise
Campaigns
DarkSpectre Campaigns
The Zoom Stealer
Affected Platforms
Claude For Chrome
Copilot For Edge
Edge
Firefox
Gemini For Chrome
OpenAI Atlas
-
REC
Recon
No techniques detected
-
RD
Resource Dev
No techniques detected
-
IA
Initial Access
No techniques detected
-
EX
Execution
No techniques detected
-
PE
Persistence
No techniques detected
-
PE
Priv Esc
No techniques detected
-
DE
Defense Evasion
No techniques detected
-
CA
Cred Access
No techniques detected
-
DI
Discovery
No techniques detected
-
LM
Lateral Mov
No techniques detected
-
CO
Collection
No techniques detected
1
C2
C2
T1071 - Application Layer Protocol
1
EX
Exfil
T1041 - Exfiltration Over C2 Channel
-
IM
Impact
No techniques detected
3
techniques detected across
2
tactics
Related Clusters (3)
Gartner Advises Blocking AI Browsers Due to Security Risks
Dec 8
·
4 sources
24
Security Flaws in AI Browsers Expose Users to Prompt Injection Attacks
Nov 11
·
11 sources
21
HashJack Attack Exploits AI Browsers via URL Manipulation
Nov 27
·
11 sources
16
Related Articles (3)
Socket researchers uncovered five coordinated Chrome extensions
site.guard.io
·
Oct 5
Gartner Calls For Pause on AI Browser Use
Infosecurity-Magazine
·
Dec 9
HashJack Indirect Prompt Injection Weaponizes Websites
Infosecurity-Magazine
·
Nov 26
Related Entities
ShadyPanda
Phishing
Supply Chain Attack
DarkSpectre Campaigns
The Zoom Stealer
Comet
GhostPoster
T1041 - Exfiltration Over C2 Channel
T1071 - Application Layer Protocol
T1195 - Supply Chain Compromise
Claude For Chrome
Copilot For Edge
