Malicious Edge extension abuses Native Messaging as bridge to malware

A malicious Microsoft Edge extension called Edgecution escapes the browser sandbox via the Chrome Native Messaging protocol to deploy a Python-based backdoor. Attackers pose as IT support on Microsoft Teams, directing victims to a fake update site. Zscaler links the malware to an initial access broker connected to the Payouts Kings ransomware operation.