Kraken Botnet Twice The Size Of Storm
ID: 676766b0-b733-5bd5-bc08-36cd44a14010
STIX ID: report--676766b0-b733-5bd5-bc08-36cd44a14010
Feed Name: Darknet
DumpBrowserSecrets is a Windows post‑exploitation tool that extracts browser-stored secrets (passwords, cookies, OAuth refresh tokens, credit cards, autofill data, history, bookmarks) from Chromium-based browsers and Firefox; it bypasses Chrome's App-Bound Encryption by injecting a DLL into a headless Chromium process to call the IElevator COM interface, retrieves DPAPI/NSS keys where applicable, and includes operational evasion features and file-lock bypasses — the report covers usage, extracted outputs, attack scenarios, detection opportunities, and mitigation recommendations for red teams and defenders.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
