Call for Authors and New Members for Relaunch of Darknet
ID: a57bf700-90c5-50c9-9e56-2722754bde4b
STIX ID: report--a57bf700-90c5-50c9-9e56-2722754bde4b
Feed Name: Darknet
DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that targets Chromium‑based and Gecko‑based browsers on Windows to extract saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL (via Early Bird APC) to call the IElevator COM interface, and uses DPAPI/NSS methods where applicable; the tool is designed for red‑team use but contains operational evasion features relevant to real attacker tradecraft and therefore poses a serious credential theft risk to enterprise environments.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
