Is Google Public DNS Safe?
ID: 311a9375-9b4e-5350-b09b-b5783ec5e325
STIX ID: report--311a9375-9b4e-5350-b09b-b5783ec5e325
Feed Name: Darknet
DumpBrowserSecrets is a precompiled Windows post-exploitation tool that harvests browser-stored credentials and session tokens from major Chromium-based and Gecko-based browsers by using techniques such as Early Bird APC DLL injection into a headless Chromium process to leverage the IElevator COM interface (bypassing App-Bound Encryption), DPAPI key extraction for some browsers, and direct NSS decryption for Firefox; it outputs structured JSON and includes operational evasion features aimed at evading EDR, making it highly relevant for red teams and a potent capability if used by attackers for lateral movement and SaaS account takeover.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
