US Veterans Information Leaked on The Web
ID: 19c5bc19-b368-50e5-be2e-c94d58c15985
STIX ID: report--19c5bc19-b368-50e5-be2e-c94d58c15985
Feed Name: Darknet
DumpBrowserSecrets is a Windows post‑exploitation tool that harvests browser‑stored secrets (saved logins, session cookies, OAuth refresh tokens, credit cards, autofill and history) from Chromium‑based browsers and Firefox by spawning a headless browser, injecting a DLL via Early Bird APC to use the IElevator COM interface (bypassing Chrome App‑Bound Encryption) or by extracting DPAPI/NSS secrets; the report details functionality, evasion features, an attack scenario, detection opportunities and mitigations.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
