Kiev Power Outage Linked To Cyber Attacks
ID: a4085b9d-e0e9-59b5-95f7-48feee0b3f15
STIX ID: report--a4085b9d-e0e9-59b5-95f7-48feee0b3f15
Feed Name: Darknet
DumpBrowserSecrets is a public post‑exploitation tool that harvests credentials and session tokens from Chromium‑based browsers (Chrome, Edge, Brave, etc.) and Firefox on Windows. It bypasses Chrome App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL via Early Bird APC to call the IElevator COM interface, handles DPAPI/NSS for other browsers, and includes multiple EDR‑evasion techniques; output is structured JSON for red‑team or offensive testing and demonstrates a realistic path to cloud account takeover from a compromised developer workstation.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
