Network Security Scanner & Vulnerability Management Tool
ID: 668ba884-6bf5-5265-82dc-2933284f0337
STIX ID: report--668ba884-6bf5-5265-82dc-2933284f0337
Feed Name: Darknet
DumpBrowserSecrets is a Windows post‑exploitation tool that harvests browser-stored credentials and session data from Chromium-based browsers and Firefox by using techniques including headless Chromium spawning, Early Bird APC DLL injection to invoke the IElevator COM interface (bypassing App‑Bound Encryption), DPAPI/NSS decryption, and various evasion methods; the report explains supported browsers, extracted data types, a realistic attack scenario, detection opportunities, and recommended mitigations.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
