Intel Acquires Security Specialist McAfee For $7.68bn
ID: 040b433f-5fca-5610-84ca-9a7cad9eb908
STIX ID: report--040b433f-5fca-5610-84ca-9a7cad9eb908
Feed Name: Darknet
DumpBrowserSecrets is a precompiled Windows post‑exploitation tool that harvests browser‑stored secrets from major Chromium‑based browsers (Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface, retrieves DPAPI/NSS keys as needed, and writes extracted cookies, OAuth tokens, saved logins, credit cards, and autofill data to JSON; the repo also documents evasion techniques, an attack scenario, and detection/mitigation guidance for defenders.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
