Malware
Umbrij
- First Reported
- Jun 30, 2026
- Latest Reported
- Jun 30, 2026
Reported Context (1)
- ToddyCat developed Umbrij to abuse Google APIs, remote debugging, and copied browser profiles to steal OAuth authorization codes from Gmail sessions while avoiding EPP and EDR detection. Kaspersky Details ToddyCat’s Umbrij Tool for Stealing Google OAuth Codes
Threat Actors (1)
MITRE ATT&CK (7)
Vendors (4)
Products (9)
Tools (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.