Blockchain, Slowmist, Security, Crypto, Chrome Extension.
manifest.json file, we noted that background used /jquery/jquery-3.6.0.min.js and content used /jquery/jquery-3.5.1.min.js. We focused our analysis on these two jQuery files.： In jquery/jquery-3.6.0.min.js, we discovered malicious code that processed browser cookies into JSON and sent them to