Hackers Attack Root Servers and Slow Internet Key Traffic
ID: 6c0075cb-d6da-5cb0-9ceb-71de0e0a71e5
STIX ID: report--6c0075cb-d6da-5cb0-9ceb-71de0e0a71e5
Feed Name: Darknet
DumpBrowserSecrets is a publicly documented post-exploitation tool designed to harvest browser-stored credentials and session data from major browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox). It bypasses Chrome's App-Bound Encryption by injecting a DLL into a headless Chromium process to invoke the IElevator COM interface, retrieves DPAPI/NSS secrets for other browsers, and outputs structured JSON of recovered credentials and tokens; the report also describes evasion techniques, an operator attack scenario, and recommended detection and mitigation approaches.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
