Should US Border Cops Need a Warrant To Search Devices?
ID: 92fd2519-33cc-5511-94a8-b60cc3f33f56
STIX ID: report--92fd2519-33cc-5511-94a8-b60cc3f33f56
Feed Name: Darknet
DumpBrowserSecrets is a Windows post-exploitation tool that harvests browser-stored credentials (cookies, saved logins, OAuth refresh tokens, credit cards, autofill, history) from Chromium-based browsers and Firefox by using techniques such as headless Chromium spawning, Early Bird APC DLL injection, and an IElevator COM-based App-Bound Encryption bypass; it includes DPAPI and NSS handling, operational evasion features, outputs structured JSON for red-team use, and the report provides usage examples, detection opportunities, and mitigation recommendations.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
