Facebook Apps Leaking Personal Data To Third Parties
ID: 023025f7-c90c-5afe-8431-dfef39b4937e
STIX ID: report--023025f7-c90c-5afe-8431-dfef39b4937e
Feed Name: Darknet
DumpBrowserSecrets is a Windows post‑exploitation tool that harvests saved credentials, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from major Chromium‑based browsers and Firefox. It implements an App‑Bound Encryption bypass for Chrome/Edge/Brave by injecting a DLL into a spawned headless Chromium process (using Early Bird APC and the IElevator COM interface) to decrypt keys, and uses DPAPI/NSS methods for other browsers; the tool includes multiple evasion features and outputs structured JSON for red‑team use.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
