iPhone 4 Pre-Order System Exposes Customer Data
ID: 4fc39455-a151-52e6-b889-e9d9ac042899
STIX ID: report--4fc39455-a151-52e6-b889-e9d9ac042899
Feed Name: Darknet
Threat Score
DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, history and bookmarks from Chromium-based browsers and Firefox; it bypasses Chrome's App-Bound Encryption by injecting a DLL into a headless Chromium process and using the IElevator COM interface, includes DPAPI/NSS handling for other browsers, and implements multiple evasion techniques, outputting results as structured JSON for red-team or adversary use.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.