Recover MSN, Yahoo Messenger, ICQ, Trillian Passwords
ID: bde642af-b775-5af4-b07e-4dcbe8602dec
STIX ID: report--bde642af-b775-5af4-b07e-4dcbe8602dec
Feed Name: Darknet
DumpBrowserSecrets is a publicly available post-exploitation tool that extracts credentials and secrets from major browsers (Chrome, Edge, Brave, Opera/Opera GX, Vivaldi, and Firefox). It implements an App-Bound Encryption bypass for modern Chromium builds by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface, handles DPAPI and NSS decryption for other browsers, and includes operational evasion features; recovered artifacts (cookies, OAuth refresh tokens, saved logins, credit cards, autofill data) enable rapid lateral movement and cloud account takeover if abused, and the report includes detection and mitigation recommendations.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
