Hacking Tools, Hacker News & Cyber Security
ID: b8f9a518-ea60-54fb-8736-b6bf28953649
STIX ID: report--b8f9a518-ea60-54fb-8736-b6bf28953649
Feed Name: Darknet
Threat Score
DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts passwords, cookies, OAuth refresh tokens, credit card data and browsing history from Chrome-, Edge- and Firefox-family browsers. It bypasses Chrome's App-Bound Encryption by injecting a DLL into a headless Chromium process to call the IElevator COM interface, supports DPAPI and NSS decryption for other browsers, outputs structured JSON, includes multiple evasion techniques, and provides detection/mitigation guidance for defenders.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.