logo

ATM Hacked Using Samsung Galaxy S4 & USB Port

ID: 7758d3cd-950f-5598-89f8-23cd58448d65

STIX ID: report--7758d3cd-950f-5598-89f8-23cd58448d65

Feed Name: Darknet

Threat Score
75/100

Date Published: 2015-01-08

Date Updated: 2026-05-08

...
...

DumpBrowserSecrets is a precompiled Windows post‑exploitation tool that harvests browser‑stored credentials and session data from Chromium‑based browsers (including App‑Bound Encryption bypass via IElevator COM and DLL injection) and Firefox (via NSS decryption). The report documents its components, supported browsers and data types, operational evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), an attack scenario demonstrating rapid credential extraction and session replay potential, and detection/mitigation guidance for defenders.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.