Seattle Computer Security Expert Turns Tables On The Police
ID: 47e2544c-71a7-5266-b42d-5cf33a3fb517
STIX ID: report--47e2544c-71a7-5266-b42d-5cf33a3fb517
Feed Name: Darknet
DumpBrowserSecrets is a Windows post‑exploitation tool that harvests browser-stored secrets (passwords, cookies, OAuth refresh tokens, credit cards, autofill and history) from Chromium-based and Firefox browsers; it bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL (Early Bird APC + IElevator COM) to decrypt encryption keys, includes DPAPI/NSS handling for other browsers, outputs structured JSON, and includes several operational evasion techniques along with detection and mitigation advice.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
