AVG, Avira and WhatsApp Websites DNS Jacked By Pro-Palestinian Hacktivists
ID: 9426d17d-b1c1-5d7c-9394-931cfb16e6d1
STIX ID: report--9426d17d-b1c1-5d7c-9394-931cfb16e6d1
Feed Name: Darknet
DumpBrowserSecrets is a Windows post-exploitation credential-harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from major Chromium- and Gecko-based browsers; it bypasses Chrome's App-Bound Encryption by injecting a DLL into a headless Chromium process via Early Bird APC and IElevator COM decryption, handles DPAPI and NSS models for other browsers, includes multiple evasion features, and outputs structured JSON for red-team or malicious use.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
