Zeus Botmaster Targets Anonymous Supporters
ID: 6535cb11-afc0-5f1a-bd89-9b6d2c57d235
STIX ID: report--6535cb11-afc0-5f1a-bd89-9b6d2c57d235
Feed Name: Darknet
DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that extracts extensive browser‑stored secrets (passwords, cookies, OAuth tokens, credit cards, autofill, history) from Chromium‑based browsers and Firefox. It implements an App‑Bound Encryption bypass for modern Chrome/Edge/Brave by spawning a headless Chromium process and injecting a DLL via Early Bird APC to call the IElevator COM interface, handles DPAPI and NSS decryption for other browsers, and includes multiple evasion techniques; the report covers usage, detection opportunities, mitigation advice, and red‑team relevance.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
