Ohio University Compromised for Over a Year!
ID: dc3baf32-7298-5bc6-806c-0922ec8e68e8
STIX ID: report--dc3baf32-7298-5bc6-806c-0922ec8e68e8
Feed Name: Darknet
Threat Score
DumpBrowserSecrets is a publicly available post-exploitation tool that harvests browser-stored credentials (saved logins, session cookies, OAuth refresh tokens, credit card data, autofill, history, bookmarks) from Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox by bypassing App-Bound Encryption (Chrome 127+) using headless Chromium process injection and the IElevator COM interface; it includes DPAPI and NSS handling, multiple evasion techniques, and outputs structured JSON for red-team use or malicious abuse.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.