Get the ball rollin’
ID: b09cbdc8-8bf8-59d0-8b3e-40d3744ddd98
STIX ID: report--b09cbdc8-8bf8-59d0-8b3e-40d3744ddd98
Feed Name: Darknet
### Executive summary: DumpBrowserSecrets is a publicly documented post-exploitation credential-harvesting tool that extracts saved credentials, session cookies, OAuth refresh tokens, autofill data and browsing history from major Chromium-based browsers (Chrome, Edge, Brave, Opera, Vivaldi) and Firefox. It implements a DLL injection + IElevator COM bypass to defeat Chrome's App-Bound Encryption, includes DPAPI/NSS handling for other browsers, and provides evasion features and JSON output suitable for red team use or abuse by adversaries.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
