THC Releases Nokia Phone ROM Images
ID: 5d4c4bf8-7f48-5a5d-ae71-f957549b2e0b
STIX ID: report--5d4c4bf8-7f48-5a5d-ae71-f957549b2e0b
Feed Name: Darknet
DumpBrowserSecrets is a Windows post-exploitation tool that harvests browser-stored secrets (passwords, session cookies, OAuth refresh tokens, credit cards, autofill data, history, bookmarks) from Chrome/Brave/Edge (via an App-Bound Encryption bypass using DLL injection and the IElevator COM interface), Opera/Opera GX/Vivaldi (DPAPI), and Firefox (NSS). It is designed for red-team use but includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parser) that make it relevant for testing endpoint defenses and demonstrates a realistic cloud/SaaS account takeover threat from compromised developer workstations.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
