logo

What You Need To Know About KRACK WPA2 Wi-Fi Attack

ID: 622ea3e3-463f-5f61-b049-d8c5b921eb44

STIX ID: report--622ea3e3-463f-5f61-b049-d8c5b921eb44

Feed Name: Darknet

Threat Score
78/100

Date Published: 2017-10-19

Date Updated: 2026-05-08

...
...

DumpBrowserSecrets is a publicly documented post-exploitation tool that harvests browser-stored credentials and session tokens from major Windows browsers (Chrome/Edge/Brave via App-Bound Encryption bypass, Opera/Vivaldi via DPAPI, and Firefox via NSS decryption). The report explains the tool's architecture (an executable plus an injected DLL), its use of Early Bird APC injection and the IElevator COM interface to decrypt app-bound keys, extracted data types (cookies, OAuth tokens, saved logins, credit cards, autofill, history), operational evasion techniques, a red-team attack scenario, and detection/mitigation recommendations.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.