>When the user types this command Atlas will open some browser tabs and exfiltrate the victim's name from the current web page and send it to a remote server vi

>When the user types this command Atlas will open some browser tabs and exfiltrate the victim's name from the current web page and send it to a remote server via the hash. But the remote server doesn't see the hash? This casts doubt into the content, since the attack was clearly not tested. Am I missing something? It's a pretty interesting post though, but hardly surprising - touching and rendering untrusted content is always risky.