Merry Christmas & A Happy New Year 2017
ID: 1b9a8535-b0c7-5cec-8fb6-8818b03cfcab
STIX ID: report--1b9a8535-b0c7-5cec-8fb6-8818b03cfcab
Feed Name: Darknet
DumpBrowserSecrets is a Windows post-exploitation tool that harvests browser-stored secrets (saved passwords, cookies, OAuth tokens, credit cards, autofill, history) across Chromium-based and Firefox browsers by bypassing App-Bound Encryption (via spawning a headless Chromium process and DLL injection using Early Bird APC to call the IElevator COM interface) or extracting DPAPI/NSS keys; it includes multiple operational evasion features, outputs structured JSON, and is positioned for red-team/assumed-breach use while demonstrating a realistic threat to enterprise SaaS and developer workstations.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
