Binary Analysis Platform For Computer Security
ID: 9d600692-1608-516d-ab34-01898f6daed1
STIX ID: report--9d600692-1608-516d-ab34-01898f6daed1
Feed Name: Darknet
DumpBrowserSecrets is a Windows post‑exploitation tool that harvests browser‑stored secrets (saved credentials, session cookies, OAuth refresh tokens, credit cards, autofill data and history) from Chromium‑based browsers and Firefox. The report documents its architecture (an executable plus a DLL that is injected into a headless Chromium process to bypass App‑Bound Encryption via the IElevator COM interface), supported browsers, evasion features, example attack scenarios, and detection/mitigation recommendations for defenders.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
