back in 2022 i found a bug that would let me, with no user interaction, turn any chromium-based browser into a permanent js botnet member
in edge, you wouldn't even notice anything out-of-place, and would stay connected to the c2 even after closing the browser
today, almost 4 years later, the bug is finally public:
https://issues.chromium.org/issues/40062121
Rebane
npub1jd…408ye
2026-05-20 11:42:20 UTC
Author Public Key
npub1jd6jws6am6vmwt8yyuke86l7sxrt6zlymaynfdsqnwgr2atk2pnqt408yeSeen on
wss://relay.momostr.pinkPublished at
2026-05-20 11:42:20 UTCEvent JSON
{
"id": "ad8ad69ef5e836ed1084df900d7ba62dbe760102a881f1245cc82556007f45e4",
"pubkey": "937527435dde99b72ce4272d93ebfe8186bd0be4df4934b6009b903575765066",
"created_at": 1779277340,
"kind": 1,
"tags": [
[
"imeta",
"url https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/606/712/499/138/378/original/751aadcfcdfad72a.mp4",
"m video/mp4"
],
[
"proxy",
"https://infosec.exchange/@rebane2001/116606719764376414",
"web"
],
[
"proxy",
"https://infosec.exchange/users/rebane2001/statuses/116606719764376414",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/rebane2001/statuses/116606719764376414",
"pink.momostr"
],
[
"-"
]
],
"content": "back in 2022 i found a bug that would let me, with no user interaction, turn any chromium-based browser into a permanent js botnet member\n\nin edge, you wouldn't even notice anything out-of-place, and would stay connected to the c2 even after closing the browser\n\ntoday, almost 4 years later, the bug is finally public:\nhttps://issues.chromium.org/issues/40062121\nhttps://media.infosec.exchange/infosec.exchange/media_attachments/files/116/606/712/499/138/378/original/751aadcfcdfad72a.mp4\n",
"sig": "0f7f8a82f25fd6ed7f8815079b8d9ba17a6d6178e5a42561d351b9957a95bdc05124d11a4a4e59e14a0ce7384afd80ab7d86280ca8031d3f765379135df3bfee"
}