The Dyn DNS DDoS That Killed Half The Internet
ID: 3f513c50-0ef8-53dd-8d7a-b779e9218bca
STIX ID: report--3f513c50-0ef8-53dd-8d7a-b779e9218bca
Feed Name: Darknet
DumpBrowserSecrets is a post-exploitation credential-harvesting tool (open-source/red-team oriented) that extracts saved credentials, cookies, OAuth tokens, credit card data, autofill entries, and history from Chromium-based browsers (including bypassing Chrome App-Bound Encryption via DLL injection and IElevator) and Firefox (NSS). It includes evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication) and outputs structured JSON for analysis, making it effective for lateral movement and cloud account takeover on compromised Windows hosts.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
