Hacking Tools, Hacker News & Cyber Security
ID: 726cabe9-34d7-5824-8c01-d6c94804818c
STIX ID: report--726cabe9-34d7-5824-8c01-d6c94804818c
Feed Name: Darknet
DumpBrowserSecrets is a post-exploitation credential-harvesting tool that targets Chromium-based browsers (Chrome, Edge, Brave) and Firefox to extract saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries and browsing history; it bypasses Chrome's App-Bound Encryption by injecting a DLL into a spawned headless Chromium process (using Early Bird APC and the IElevator COM interface) to decrypt keys, includes DPAPI and NSS handling for other browsers, and documents operational usage, evasion techniques, and detection/mitigation guidance.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
