The latest articles on DEV Community by Maximilian Cornett (@ernos). https://dev.to/ernos https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3871603%2Fc6114503-a936-4b52-b225-4abc408c9fcf.png https://dev.to/ernos en Maximilian Cornett Fri, 10 Apr 2026 12:53:24 +0000 https://dev.to/ernos/a-firefox-extension-xpi-malware-scanner-python-script-and-live-malware-examples-5bid https://dev.to/ernos/a-firefox-extension-xpi-malware-scanner-python-script-and-live-malware-examples-5bid <p><a href="https://www.github.com/ernos/browser-xpi-malware-scanner" rel="noopener noreferrer">Scanner Availible here - https://www.github.com/ernos/browser-xpi-malware-scanner</a></p> <p>First malware found. Full trojan with remote commands sent from a C2 server and full password-stealing, command injection and sandbox breakout:<br> <a href="https://www.yourdev.net/blog.php?post=extension-malware-in-the-wild" rel="noopener noreferrer">First Malware Found - Full Trojan with remote C2 server etc <code>YTMP4 Youtube Downloader MP4</code></a></p> <p>Second malware found. Affiliate click fraud:<br> <a href="https://www.yourdev.net/blog.php?post=supreme-adblocker-youtube-affiliate-fraud-complete-analysis" rel="noopener noreferrer">The Ad-Blocker That Steals Your Clicks: Inside "Supreme Adblocker for Youtube"</a></p> <p>Third Malware found in the wild:<br> <a href="https://www.yourdev.net/blog.php?post=using-browser-xpi-extension-malware-scanner-and-exposing-malicious-youtube-downloader" rel="noopener noreferrer">How I Built a Browser Extension Malware Scanner — And Used It to Expose a Malicious "YouTube Downloader"</a></p> <p>All of these extensions are still live at <a href="https://addons.mozilla.org" rel="noopener noreferrer">https://addons.mozilla.org</a></p> malwareanalysis malware cybersecurity firefox