Microsoft Puts Hold on Forefront Security Product Range
ID: 0584e204-c51b-54e3-b01a-8fd6eeeaa91a
STIX ID: report--0584e204-c51b-54e3-b01a-8fd6eeeaa91a
Feed Name: Darknet
DumpBrowserSecrets is a publicly released post‑exploitation tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, history, and bookmarks from major browsers. It bypasses Chromium App‑Bound Encryption (Chrome 127+) by spawning a headless Chromium process and performing Early Bird APC DLL injection to call the IElevator COM interface, retrieves DPAPI keys for some browsers, and uses NSS decryption for Firefox; the tool includes multiple operational evasion techniques and outputs structured JSON for red team use.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
