BioShocking: Browser Extension Clipboard Access via AI Agent Prompt Injection

Ankit Mehta@Secvyn

•updated Jun 30, 2026•0•0•2

Detects clipboard access operations (Read/Write) initiated by common web browsers (Chrome, Edge, Brave, Electron-based apps) when running with specific command-line arguments typically associated with renderer or extension processes. This can indicate malicious code or browser extensions attempting to monitor or steal sensitive clipboard content.