Apple Retires Support Leaving 20% Of Macs Vulnerable
ID: 870b4c08-57f4-512e-9201-3282754cf1a0
STIX ID: report--870b4c08-57f4-512e-9201-3282754cf1a0
Feed Name: Darknet
DumpBrowserSecrets is a precompiled Windows post-exploitation tool that harvests browser-stored secrets (saved logins, session cookies, OAuth refresh tokens, credit cards, autofill data and history) from Chromium-based and Firefox browsers. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL via Early Bird APC to use the IElevator COM interface, and handles DPAPI and NSS decryption for other browsers; the report covers usage, evasion techniques, detection opportunities, and its relevance to red-team and assumed‑breach testing.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
