🎯 Automated Exfiltration

The items that name it 2

• Socket: Malicious Extensions Drain Axiom Trade and Padre Crypto Sessions
  writeup2026-09-12

  Collection and exfiltration occur automatically once targeted platform is open, without victim action

• Socket: GitHub Actions Abuse Powers Distributed cPanel/WHM Exploitation Campaign
  writeup2026-07-23

  Workflow automatically uploads newly collected results in chunks via HTTP POST.