Preliminary research
HermeticReader: turning Adobe's 300M-install extension into a WhatsApp takeover
AI-collected research leads through 22 September 2026, including targeted additions between broader sweeps. Unranked, incomplete, not community-vetted, and subject to change.
Follows messages from a web-accessible Adobe extension frame into feature flags and a dormant DOM bridge. Extra properties let the attacker redirect the bridge to another tab, where DOM manipulation extracts rendered text despite script restrictions; the case explains how extension privileges and page-controlled messages combine.
Record
- Researcher
- Shaked Biner
- Published by
- Guardio Labs
- Topic
- Browser
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Shaked Biner, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .