Cyber & Hacking
Slice For Life
Public Telegram channel monitored for cyber and underground alerting.
Original English English
🚨 Nornikovik hidden browser malware advertised on underground forum
A threat actor on an underground forum is advertising Nornikovik, a hidden-browser malware marketed as fileless and undetected. The seller describes it as a tool that runs a victim's browser silently in the background, lets the operator control it remotely, and can load the victim's saved browser data.
The listing promotes the tool to other forum members for the purpose of covert remote browser session hijacking and data theft.
𝗪𝗵𝗮𝘁'𝘀 𝗯𝗲𝗶𝗻𝗴 𝗮𝗱𝘃𝗲𝗿𝘁𝗶𝘀𝗲𝗱:
• A covert ("hidden") remote browser controlled by the attacker
• Claimed fileless operation and self-deletion after execution
• Ability to load victim browser data (cookies and autofills)
• Support for multiple mainstream browsers (Chrome, Edge, Brave, Yandex, OperaGX, Vivaldi)
• Claimed anti-analysis and anti-VM features
• Multiple persistence methods
• A builder and listener interface
𝗗𝗲𝘁𝗮𝗶𝗹𝘀:
𝗧𝗮𝗿𝗴𝗲𝘁: N/A (offensive malware)
𝗦𝗲𝗰𝘁𝗼𝗿: Cybercrime Tooling / Malware-as-a-Service
𝗔𝗰𝘁𝗼𝗿: solitaryElite
𝗖𝗹𝗮𝗶𝗺: Selling fileless hidden-browser malware
𝗘𝘅𝗽𝗼𝘀𝘂𝗿𝗲: Covert browser session hijacking and data theft tool
𝗣𝗿𝗶𝗰𝗲: Listed via autobuy (middleman accepted)
𝗢𝗯𝘀𝗲𝗿𝘃𝗲𝗱: June 1, 2026
💥 Stop guessing what's redacted. Paid subscribers see everything: darkwebinformer.com/pricing
________________________________________
Main Channel: https://t.me/SliceForLifeee
Backup Channel: https://t.me/SliceForLifeeee
Website: darkwebinformer.com
Pricing (Includes Crypto): darkwebinformer.com/pricing
API Access: darkwebinformer.com/api-details
Socials: darkwebinformer.com/socials
Donations: darkwebinformer.com/donations