Forensics Framework To Manage Cases & Case Items
ID: 86f7e2a1-a472-5b3c-a24d-28d04f765f2d
STIX ID: report--86f7e2a1-a472-5b3c-a24d-28d04f765f2d
Feed Name: Darknet
DumpBrowserSecrets is a publicly available post-exploitation tool that extracts browser-stored credentials (saved logins, session cookies, OAuth tokens, credit card data, autofill, and history) from major Chromium-based browsers and Firefox on Windows by bypassing App-Bound Encryption (via IElevator COM inside an injected DLL), DPAPI, or NSS decryption; the report covers capabilities, usage, evasion techniques, an example attack scenario, detection opportunities, and mitigation recommendations.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
