Cloud Computing Use By Criminals Increasing
ID: be18f8d4-cc5d-5389-8561-b64dc33d802d
STIX ID: report--be18f8d4-cc5d-5389-8561-b64dc33d802d
Feed Name: Darknet
Threat Score
DumpBrowserSecrets is a precompiled Windows post-exploitation tool that harvests browser-stored credentials and session tokens from Chrome, Edge, Brave, Opera (and variants), Vivaldi, and Firefox by bypassing App-Bound Encryption (via DLL injection and the IElevator COM interface), DPAPI, and NSS; it outputs structured JSON for red-team use and includes evasion features aimed at defeating EDR and static analysis, with guidance on detection and mitigation.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
