Technitium MAC Address Changer v4 (TMACv4) Released
ID: 7e3bbb5b-4fec-5d4b-bd8b-cfdf7ce9cbc4
STIX ID: report--7e3bbb5b-4fec-5d4b-bd8b-cfdf7ce9cbc4
Feed Name: Darknet
DumpBrowserSecrets is a post‑exploitation browser credential extraction tool that targets Chromium-based (Chrome, Edge, Brave) and Gecko-based (Firefox) browsers; it bypasses Chrome's App‑Bound Encryption by injecting a DLL into a headless Chromium process to use the IElevator COM interface and retrieves DPAPI/NSS-protected secrets for other browsers. The tool extracts cookies, saved logins, OAuth refresh tokens, credit card data, autofill and history, includes multiple evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication), outputs structured JSON for red-team use, and poses a significant risk for cloud account takeover and lateral movement on compromised endpoints.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
