Essential information

Value / Name

message.data

Confidence

100/100

Revoked

Yes

Valid from

05/06/2025 18:53

Valid until

31/10/2025 17:49

Pattern type

stix

Published

21/12/2025 14:06

Modified

14/04/2026 17:50

Author / Source

AlienVault

Description

No description.

Pattern

[domain-name:value = 'message.data']

Labels / Tags

Labels: banking browser backdoor browser extension chrome extensions google identity theft mesh agent pdq connect agent phishing powershell session hijacking stealer

Marking (TLP)

TLP:CLEAR