BeautifulPeople.com Leak Exposes 1.1M Extremely Private Records
ID: 868bb732-efba-5ee8-99fd-6c38de7ec549
STIX ID: report--868bb732-efba-5ee8-99fd-6c38de7ec549
Feed Name: Darknet
**DumpBrowserSecrets** is a Windows post‑exploitation tool that harvests browser‑stored secrets (saved passwords, session cookies, OAuth refresh tokens, credit cards, autofill data, history, and bookmarks) from major Chromium‑based browsers and Firefox by bypassing App‑Bound Encryption (via spawning a headless Chromium process and injecting a DLL using Early Bird APC to call the IElevator COM interface) or using DPAPI/NSS decryption; it includes operational evasion features, outputs structured JSON, and is intended for red‑team assumed‑breach testing but can be abused by adversaries for rapid cloud account takeover and lateral movement.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
