Google to Reveal Youtube Viewing Details to Viacom
ID: 9e060a78-ef05-5b7e-b00e-ae22855fd250
STIX ID: report--9e060a78-ef05-5b7e-b00e-ae22855fd250
Feed Name: Darknet
DumpBrowserSecrets is a publicly documented post‑exploitation tool designed to extract saved credentials, cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from major browsers on Windows. It supports Chromium-based browsers (Chrome, Edge, Brave) by bypassing App-Bound Encryption through Early Bird APC DLL injection into a headless Chromium process and using the IElevator COM interface, and handles Opera/Vivaldi via DPAPI and Firefox via NSS. The tool includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parser), outputs structured JSON, and is intended for red team/assumed‑breach exercises; detection counters and mitigation guidance are also provided.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
