Norton Antivirus Funny Bug
ID: 1ea66e3f-7f4a-5a23-9c4f-1f872346560e
STIX ID: report--1ea66e3f-7f4a-5a23-9c4f-1f872346560e
Feed Name: Darknet
DumpBrowserSecrets is a post‑exploitation credential harvesting tool that extracts saved credentials, session cookies, OAuth refresh tokens, credit card data, autofill and browsing history from major browsers; it bypasses Chrome App‑Bound Encryption by injecting a DLL into a headless Chromium process to call the IElevator COM interface (Early Bird APC injection), uses DPAPI and NSS decryption for other browsers, and includes evasion features, usage examples, and detection/mitigation guidance for red team and adversary scenarios.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
