Mirai Source Code for DDoS Malware Bonet Leaked
ID: 89c0c31c-82a6-576d-9789-3b9d0ecbaa1d
STIX ID: report--89c0c31c-82a6-576d-9789-3b9d0ecbaa1d
Feed Name: Darknet
DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, history, and bookmarks from major browsers (Chrome, Edge, Brave, Opera, Opera GX, Vivaldi, and Firefox). It implements an App-Bound Encryption bypass for Chromium-based browsers by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface to decrypt keys, includes DPAPI and NSS handling for other browsers, and contains multiple evasion features aimed at reducing EDR detection; output is structured JSON suitable for red-team engagements or abuse by adversaries.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
