UK hackers condemn McKinnon trial
ID: ac69f927-880d-5847-bfe3-bf3f1aa343f4
STIX ID: report--ac69f927-880d-5847-bfe3-bf3f1aa343f4
Feed Name: Darknet
DumpBrowserSecrets is a post-exploitation credential-harvesting tool that targets major Chromium and Gecko browsers on Windows to extract saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history; it bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL that uses the IElevator COM interface, and it includes evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication) designed to evade EDRs and enable fast credential collection for lateral movement and cloud account takeover.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
