China To Outlaw All Unapproved Darknet VPN Services
ID: 6d233c8e-edfc-5641-a2f1-f7824aea76fe
STIX ID: report--6d233c8e-edfc-5641-a2f1-f7824aea76fe
Feed Name: Darknet
DumpBrowserSecrets is a Windows post‑exploitation credential‑harvesting tool that extracts saved passwords, cookies, OAuth tokens, credit card data and history from Chromium‑based and Firefox browsers; it implements an App‑Bound Encryption bypass for Chrome/Edge/Brave by injecting a DLL into a headless Chromium process (Early Bird APC + IElevator COM) and includes evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication) while outputting structured JSON for red‑team use.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
