pwdump6 1.5.0 as well as fgdump 1.5.0 Released for Download
ID: 78f5de2e-2704-5186-87fa-8ebd4b40b5e7
STIX ID: report--78f5de2e-2704-5186-87fa-8ebd4b40b5e7
Feed Name: Darknet
DumpBrowserSecrets is a public post‑exploitation tool that harvests credentials and session data from major Windows browsers (Chrome/Edge/Brave via App‑Bound Encryption bypass, Opera/Vivaldi via DPAPI, Firefox via NSS). The report details its architecture (an executable plus injected DLL using Early Bird APC to call the IElevator COM interface), extracted data types (cookies, logins, OAuth tokens, credit cards, autofill, history), operational evasion features, detection opportunities, and recommended mitigations for enterprise environments.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
