
Phishing sites posing as DeepSeek downloads drop a proxy backdoor
Once installed, BrowserVenom silently modifies proxy settings for Chromium as well as Gecko-based browsers. It ensures persistence by updating configuration files that reroute all HTTP/HTTPS traffic to an external proxy, enabling attackers to snoop, …