Web Infrastructure Fingerprinting & Delivery Tool
ID: 4cd68142-6261-5a83-a90e-c48ae8a7e92f
STIX ID: report--4cd68142-6261-5a83-a90e-c48ae8a7e92f
Feed Name: Darknet
DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts browser-stored secrets (saved logins, session cookies, OAuth refresh tokens, credit cards, autofill, history) across Chromium-based and Firefox browsers; it bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface, supports DPAPI and NSS decryption, includes multiple EDR-evasion techniques, and is intended for red-team assumed-breach assessments while also representing a credible threat if abused by adversaries.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
