MI6 Sells Digital Camera on Ebay Containing Terrorist Images
ID: 9299b308-04d6-5a10-8c5c-0ddfc5c5662d
STIX ID: report--9299b308-04d6-5a10-8c5c-0ddfc5c5662d
Feed Name: Darknet
DumpBrowserSecrets is a Windows post-exploitation credential-harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from Chromium-based browsers (Chrome, Edge, Brave, Opera, Vivaldi) and Firefox. It bypasses Chrome's App-Bound Encryption (Chrome 127+) by spawning a headless Chromium process and injecting a DLL via Early Bird APC to use the IElevator COM interface to decrypt keys, includes DPAPI and NSS handling for other browsers, outputs structured JSON, and incorporates operational evasion techniques—making it a high-impact tool for compromising developer workstations and enterprise SaaS sessions despite being presented as a red-team utility.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
