UK Has The Worst Internet Security In Europe
ID: aefada6d-245d-5d85-9a75-63c65e4d547d
STIX ID: report--aefada6d-245d-5d85-9a75-63c65e4d547d
Feed Name: Darknet
DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts browser-stored secrets (saved logins, session cookies, OAuth tokens, credit cards, autofill data, history, and bookmarks) from major Chromium-based browsers and Firefox. It implements an App‑Bound Encryption bypass for Chrome/Edge/Brave by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface, handles DPAPI for Opera/Vivaldi variants, and uses NSS decryption for Firefox; the tool includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, Early Bird APC injection), outputs structured JSON, and is intended for red-team testing but can be abused for cloud account takeover and lateral movement.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
