DarkMarket Carding (Credit Card Fraud) Site Part of FBI Sting
ID: c32021ee-c463-5f9e-83d4-de4f8089e8fa
STIX ID: report--c32021ee-c463-5f9e-83d4-de4f8089e8fa
Feed Name: Darknet
DumpBrowserSecrets is a publicly available post-exploitation tool that harvests browser-stored credentials and session data from major browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox). It bypasses Chrome's App-Bound Encryption by injecting a DLL into a headless Chromium process to invoke the IElevator COM interface (and uses DPAPI/NSS handling for other browsers), extracts cookies, saved logins, OAuth tokens, credit cards, and autofill data, includes several EDR-evasion techniques, completes extraction rapidly, and is intended for red team/assumed-breach testing but presents a significant credential-theft risk if misused.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
