Australian Privacy Commissioner Rules Google Wifi Actions Illegal
ID: 2eb688a9-382d-5427-aceb-69b230970d6c
STIX ID: report--2eb688a9-382d-5427-aceb-69b230970d6c
Feed Name: Darknet
DumpBrowserSecrets is a publicly documented post‑exploitation tool that harvests browser‑stored secrets (passwords, session cookies, OAuth refresh tokens, credit card data, autofill and history) from major Windows browsers. It implements an App‑Bound Encryption bypass for Chromium browsers by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface to decrypt keys, handles DPAPI and NSS decryption for other browsers, includes multiple evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, file‑handle duplication), and outputs structured JSON intended for red‑team assessments but which also represents a high‑impact credential theft capability if used maliciously.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
