Malicious Edge Extension Uses Chrome Native Messaging to Execute Code on Victim Systems

A campaign named "Edgecution" uses Teams-based social engineering and a fake Microsoft update site to silently install a malicious Microsoft Edge extension that abuses Chrome native messaging to talk to a Python backdoor on the host, enabling full system compromise; the report includes C2 wss URLs, SHA256 hashes for the extension and backdoor, and mitigation recommendations.