who is backbone?
ID: 3bf68011-33f8-5b06-a322-28e7c59f8514
STIX ID: report--3bf68011-33f8-5b06-a322-28e7c59f8514
Feed Name: Darknet
DumpBrowserSecrets is a post‑exploitation credential harvesting tool that targets Chrome/Brave/Edge (App‑Bound Encryption bypass via IElevator + DLL injection), Opera/Vivaldi (DPAPI), and Firefox (NSS) to extract saved passwords, cookies, OAuth tokens, credit card data, autofill entries, and history into JSON. Built for red-team assumed‑breach scenarios, it includes multiple evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication) and is explicitly designed to demonstrate the realistic blast radius of a compromised developer workstation, enabling lateral movement and cloud account takeover if executed on an endpoint.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
