WikiLeaks Attacks Cause Rival DDoS Retaliation
ID: 790d4929-65d2-5daf-822e-8794b69ca7b2
STIX ID: report--790d4929-65d2-5daf-822e-8794b69ca7b2
Feed Name: Darknet
DumpBrowserSecrets is a post‑exploitation credential extraction tool that targets Chrome/Edge/Brave (App‑Bound Encryption bypass via a headless Chromium + injected DLL using Early Bird APC and the IElevator COM interface), Opera/Opera GX/Vivaldi (DPAPI), and Firefox (NSS). It harvests saved passwords, session cookies, OAuth tokens, credit cards, autofill data and browsing history, outputs structured JSON, and includes multiple EDR‑evasion features, making it a high‑risk capability for compromising developer workstations and achieving SaaS/cloud account takeover.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
