BioShocking Attack - Browser/AI Agent Spawning Suspicious Shell Processes

Ankit Mehta@Secvyn

•updated Jun 30, 2026•1•0•3

Detects web browsers and browser-related applications (e.g., Chrome, Edge, ChatGPT, Electron apps) spawning suspicious child processes that are commonly used for command-line execution or script interpretation. This behavior is often indicative of malicious extensions, browser exploits, or attempts to leverage browser processes for initial execution or lateral movement.