Adobe Launches Sandboxed Flash Player For Firefox
ID: 625f8c94-5216-56f7-90b8-8ec23b11756d
STIX ID: report--625f8c94-5216-56f7-90b8-8ec23b11756d
Feed Name: Darknet
DumpBrowserSecrets is a post‑exploitation tool for Windows that harvests browser‑stored credentials (cookies, saved logins, OAuth refresh tokens, credit cards, autofill, history, bookmarks) across Chromium‑based and Gecko browsers. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL via Early Bird APC to use the IElevator COM interface, handles DPAPI and NSS decryption for other browsers, includes evasion mechanisms (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parser), and is presented as a red‑team oriented tool with detection and mitigation guidance.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
