Windows PowerShell DNS Server Blackhole Tool
ID: 0ecc6290-ea9d-5fbb-b822-3a1032e414fc
STIX ID: report--0ecc6290-ea9d-5fbb-b822-3a1032e414fc
Feed Name: Darknet
DumpBrowserSecrets is a Windows post‑exploitation tool that extracts browser-stored secrets (passwords, cookies, OAuth tokens, credit cards, autofill, history, bookmarks) from Chromium-based browsers and Firefox by using DLL injection into a headless browser, the IElevator COM interface to bypass Chrome App‑Bound Encryption, DPAPI/NSS decryption paths, and multiple operational evasion techniques; the report explains usage, extracted data, detection opportunities, and mitigation recommendations for defenders.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
