Norton Internet Security ‘Keylogger’ IRC Bug
ID: 3637c712-bdf8-5c77-82f7-635e726d4431
STIX ID: report--3637c712-bdf8-5c77-82f7-635e726d4431
Feed Name: Darknet
DumpBrowserSecrets is a publicly available post-exploitation credential-stealing tool that targets Chromium-based and Firefox browsers to extract saved credentials, session cookies, OAuth tokens, credit card details and browsing data by bypassing App-Bound Encryption (via IElevator COM) and DPAPI/NSS protections; it uses Early Bird APC DLL injection into a headless Chromium process, includes multiple operational evasion techniques, outputs structured JSON for operators, and is intended for red-team/assumed-breach use but can be misused by adversaries.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
