Who is Darknet?
ID: bcbfed02-f260-5186-9595-2a8fd5c32d7a
STIX ID: report--bcbfed02-f260-5186-9595-2a8fd5c32d7a
Feed Name: Darknet
DumpBrowserSecrets is a publicly documented post‑exploitation tool that harvests browser-stored secrets (saved passwords, session cookies, OAuth refresh tokens, credit cards, autofill data, history, and bookmarks) from Chromium- and Gecko-based browsers on Windows by using DLL injection into a headless Chromium process to leverage the IElevator COM interface (bypassing App‑Bound Encryption), DPAPI extraction for some Chromium forks, and NSS decryption for Firefox; it includes several operational evasion features and outputs structured JSON for red-team or adversary use.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
