Malicious Edge extension abuses Native Messaging as bridge to malware

A malicious Microsoft Edge extension called Edgecution uses Native Messaging to escape the browser sandbox and deploy a Python-based backdoor. Attackers pose as IT support on Microsoft Teams, directing victims to a fake Outlook Updates Management Console. Zscaler links the campaign to an initial access broker connected to the Payout Kings ransomware operation.