Security Boom Post 9/11
ID: b6be1e3d-bddd-5674-bb4f-105b63bb358f
STIX ID: report--b6be1e3d-bddd-5674-bb4f-105b63bb358f
Feed Name: Darknet
DumpBrowserSecrets is a precompiled Windows post‑exploitation tool that harvests browser‑stored secrets across Chromium- and Gecko‑based browsers. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL via Early Bird APC to use the IElevator COM interface, handles DPAPI and Firefox NSS decryption, extracts cookies, OAuth tokens, saved credentials and autofill data, includes multiple evasion features aimed at EDR, and is presented as a red‑team tool for assessing credential exposure and cloud account takeover risk.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
