Google Calendar a New Target for Phishing
ID: 03e52401-1367-5007-871a-7a9ca833a5ac
STIX ID: report--03e52401-1367-5007-871a-7a9ca833a5ac
Feed Name: Darknet
DumpBrowserSecrets is a publicly available post-exploitation tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data and browsing history from major Chromium-based and Firefox browsers on Windows by bypassing App-Bound Encryption (using IElevator COM via injected DLL in a headless Chromium process), DPAPI extraction for some browsers, and NSS decryption for Firefox; it includes operational evasion techniques and is aimed at red-team/assumed-breach use but represents a high-risk credential theft capability for compromised developer or user endpoints.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
