Oracle Auditing Tools For Database Security
ID: 18cabeb4-5d77-51cb-acc1-91e14cafb593
STIX ID: report--18cabeb4-5d77-51cb-acc1-91e14cafb593
Feed Name: Darknet
DumpBrowserSecrets is a publicly available Windows post‑exploitation tool that harvests browser-stored secrets (saved credentials, session cookies, OAuth tokens, credit cards, autofill, history) across Chromium-based browsers and Firefox; it bypasses Chrome's App‑Bound Encryption by injecting a DLL into a spawned headless Chromium process to call the IElevator COM interface, includes DPAPI and NSS handling for other browsers, and implements multiple evasion techniques aimed at reducing EDR detection, making it a high-risk tool for credential and session theft on compromised developer endpoints.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
