Mac OS X Snow Leopard Bundled With Malware Detector
ID: cc028996-ab69-5e3c-9994-389f41de55e3
STIX ID: report--cc028996-ab69-5e3c-9994-389f41de55e3
Feed Name: Darknet
DumpBrowserSecrets is a precompiled Windows post-exploitation tool that harvests browser-stored credentials and session tokens from Chromium-based and Gecko-based browsers by using a headless Chromium process with DLL injection (Early Bird APC) to bypass App-Bound Encryption (IElevator COM), DPAPI extraction for some browsers, and NSS handling for Firefox; it outputs structured JSON and includes multiple evasion features, making it useful for red teams and a significant credential-theft capability to test or exploit developer workstations.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
