(https://www.bleepingcomputer.com/news/security/copyfish-chrome-extension-hijacked-to-show-adware/):
Query:
SELECT * FROM users JOIN chrome_extensions USING (uid) WHERE identifier='eenjdnjldapjajjofmldgmkjaienebbj';Additional Query Info:
Interval: 3600
JSON:
{ "queries": { "CopyFish": { "query" : "SELECT * FROM users JOIN chrome_extensions USING (uid) WHERE identifier='eenjdnjldapjajjofmldgmkjaienebbj';", "interval" : "3600", "platform" : "", "version": "", "description" : "(https://www.bleepingcomputer.com/news/security/copyfish-chrome-extension-hijacked-to-show-adware/)", "value" : "" } } }