Disgruntled IT Worker Gets Heavy Prison Sentence
ID: 5e954c0c-9d8a-5959-b489-efa1996272bc
STIX ID: report--5e954c0c-9d8a-5959-b489-efa1996272bc
Feed Name: Darknet
DumpBrowserSecrets is a Windows post-exploitation tool that collects browser-stored secrets (saved credentials, session cookies, OAuth refresh tokens, credit cards, autofill and history) across Chromium-based browsers and Firefox. It implements an App-Bound Encryption bypass for Chrome/Edge/Brave by injecting a DLL into a headless Chromium process to call the IElevator COM interface, uses DPAPI and NSS decryption for other browsers, outputs structured JSON, and includes operational evasion features aimed at red-team or adversary use.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
