Apple Struggling With Security & Malware
ID: 101dc58b-526e-557a-aa5e-133650c89aef
STIX ID: report--101dc58b-526e-557a-aa5e-133650c89aef
Feed Name: Darknet
DumpBrowserSecrets is a Windows post-exploitation tool that harvests browser-stored secrets (saved logins, cookies, OAuth refresh tokens, credit cards, autofill data, and history) across Chromium-based and Firefox browsers. It bypasses Chrome's App-Bound Encryption by injecting a DLL into a headless Chromium process to call the IElevator COM interface, supports DPAPI and NSS decryption for other browsers, includes evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication), outputs structured JSON, and is intended for red team assumed-breach testing while remaining usable for malicious credential theft if misused.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
