back in 2022 i found a bug that would let me, with no user interaction, turn any chromium-based browser into a permanent js botnet member
in edge, you wouldn't even notice anything out-of-place, and would stay connected to the c2 even after closing the browser
today, almost 4 years later, the bug is finally public:
https://issues.chromium.org/issues/40062121
Rebane
npub1d9…xm606
2026-05-20 11:42:20 UTC
Author Public Key
npub1d9mts2hhu2jx5kzmvapmpdtlzzvh3ppgfqe777uanflz5sw9ruqqrxm606Seen on
wss://relay.ditto.pubPublished at
2026-05-20 11:42:20 UTCEvent JSON
{
"id": "1b11a7aad5627d62648b41c20d1a52f993ef4687b31959d4f8934172d17f19f5",
"pubkey": "6976b82af7e2a46a585b6743b0b57f10997884284833ef7b9d9a7e2a41c51f00",
"created_at": 1779277340,
"kind": 1,
"tags": [
[
"imeta",
"url https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/606/712/499/138/378/original/751aadcfcdfad72a.mp4",
"m video/mp4",
"dim 1920x1080",
"blurhash U15#hS$*t7Mx_4ogofayTK4.Io%NxZ%Mt6Rj"
],
[
"proxy",
"https://infosec.exchange/users/rebane2001/statuses/116606719764376414",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub"
]
],
"content": "back in 2022 i found a bug that would let me, with no user interaction, turn any chromium-based browser into a permanent js botnet member\n\nin edge, you wouldn't even notice anything out-of-place, and would stay connected to the c2 even after closing the browser\n\ntoday, almost 4 years later, the bug is finally public:\nhttps://issues.chromium.org/issues/40062121\n\nhttps://media.infosec.exchange/infosec.exchange/media_attachments/files/116/606/712/499/138/378/original/751aadcfcdfad72a.mp4",
"sig": "c0e77786ec5a4dbc76d0ec0e9990887ebcd7d5ed4d697f9a97be044e10b5877b858ae20caab741db79bb26a07d6547c127362b0ef232a28e0288d4bc7d0afa81"
}