Spam Back on the Rise with Srizbi Resurrected
ID: d1ba15c1-5896-5625-9051-78542de38d86
STIX ID: report--d1ba15c1-5896-5625-9051-78542de38d86
Feed Name: Darknet
DumpBrowserSecrets is a public, precompiled Windows post‑exploitation tool that harvests browser-stored credentials and session tokens from Chromium- and Gecko-based browsers by using techniques such as Early Bird APC DLL injection into a headless Chromium process to leverage the IElevator COM interface (bypassing App‑Bound Encryption), DPAPI extraction for some Chromium forks, and NSS decryption for Firefox; it outputs structured JSON and includes operational evasion features aimed at reducing EDR detection, making it relevant for red team testing and a potent capability for adversaries to enable lateral movement and cloud account takeover.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
