New Critical MEGApatch fixes 10 Vulnerabilities in Internet Explorer
ID: c2c4e94d-e735-5d16-8ab8-bc4bc75b556a
STIX ID: report--c2c4e94d-e735-5d16-8ab8-bc4bc75b556a
Feed Name: Darknet
### Executive Summary DumpBrowserSecrets is a publicly available post-exploitation tool that harvests browser-stored credentials and tokens from major Chromium-based and Firefox browsers on Windows, including bypassing Chrome's App-Bound Encryption by injecting a DLL into a headless Chromium process and using the IElevator COM interface. It extracts cookies, saved logins, OAuth refresh tokens (which can enable session replay), credit card data, autofill entries, and history, and includes operational evasion features intended to reduce EDR detection; its availability makes it a high-risk capability for lateral movement and cloud account takeover in compromised environments.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
