Some Relaxing on the DMCA Regulations
ID: 06d6a30d-c9f6-559d-b06b-590dcf5b2d73
STIX ID: report--06d6a30d-c9f6-559d-b06b-590dcf5b2d73
Feed Name: Darknet
DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts browser-stored secrets (saved logins, session cookies, OAuth refresh tokens, credit cards, autofill, history, and bookmarks) from Chromium-based and Firefox browsers. It bypasses Chrome’s App-Bound Encryption by injecting a DLL into a spawned headless Chromium process to call the IElevator COM interface, handles DPAPI and NSS decryption for other browsers, and includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parsing); distributed as a precompiled Windows executable intended for red-team use but readily abusable for account takeover and lateral movement.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
