Ubiquiti Wi-Fi Gear Hackable Via 1997 PHP Version
ID: 3f97f065-f156-5138-bbc1-c2d73562d193
STIX ID: report--3f97f065-f156-5138-bbc1-c2d73562d193
Feed Name: Darknet
DumpBrowserSecrets is a post-exploitation Windows tool that harvests saved credentials, session cookies, OAuth refresh tokens, credit card data and browsing history from major Chromium- and Gecko-based browsers. It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface, handles DPAPI and NSS encryption models for other browsers, includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication), and outputs structured JSON for red-team or adversary use, enabling rapid lateral movement and cloud account takeover from compromised endpoints.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
