LORCON (Loss Of Radio CONnectivity) 802.11 Packet Library
ID: 4d8b44e7-7ffd-519e-afe6-1dd0e6e3c950
STIX ID: report--4d8b44e7-7ffd-519e-afe6-1dd0e6e3c950
Feed Name: Darknet
DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool (available as precompiled Windows binaries) that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, history and bookmarks from Chromium‑based browsers and Firefox. It implements an App‑Bound Encryption bypass for Chrome/Edge/Brave by injecting a DLL into a headless Chromium process to use the IElevator COM interface, handles DPAPI for Opera/Vivaldi, and NSS for Firefox; the report covers its usage, evasion features, detection opportunities, and mitigation advice for defenders.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
