GnuPG Crypto Library libgcrypt Cracked Via Side-Channel
ID: 8ab8c08a-5fe4-59fd-b6ff-1defac3109de
STIX ID: report--8ab8c08a-5fe4-59fd-b6ff-1defac3109de
Feed Name: Darknet
DumpBrowserSecrets is a publicly documented post-exploitation tool designed to extract browser-stored secrets (passwords, cookies, OAuth refresh tokens, credit cards, autofill, history, bookmarks) from Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox. It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL via Early Bird APC to use the IElevator COM interface, handles DPAPI and NSS decryption models for other browsers, includes multiple operational evasion techniques, outputs structured JSON, and is intended for red-team/assumed-breach testing while also representing a realistic threat if used by adversaries.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
