Firefox Blocks Microsoft .NET Framework Assistant Add-on
ID: 0454bb90-e878-5f40-adb3-0b8ed49064c6
STIX ID: report--0454bb90-e878-5f40-adb3-0b8ed49064c6
Feed Name: Darknet
DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries and browsing history from major Chromium-based and Firefox browsers; it uses headless Chromium + Early Bird APC DLL injection to bypass Chrome App-Bound Encryption (IElevator COM interface) and handles DPAPI/NSS for other browsers, includes multiple EDR-evasion features, outputs structured JSON, and includes detection and mitigation guidance.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
