Golden Chickens Launches Four Modular Malware Families to Steal Chrome Credentials and Hijack Browser Sessions

Insikt Group reports that TAG-195 (Golden Chickens/Venom Spider) has developed a modular MaaS ecosystem—TinyEgg, ChonkyChicken (and a modular variant), and ChromEggscalator—that enables lightweight initial access, robust post-exploitation (browser credential theft and real-time session hijacking via Chrome DevTools Protocol), and a Chrome ABE bypass; campaigns using ClickFix-style social engineering and OCX/ regsvr32 execution have been observed, with associated IOCs including multiple lure domains, C2/staging hosts, and an identified hosting IP.