DNS Open Recursive Resolver Scanner/Scanning Tool
ID: e692236b-11ea-51e0-96ea-4bf48e9c71d1
STIX ID: report--e692236b-11ea-51e0-96ea-4bf48e9c71d1
Feed Name: Darknet
DumpBrowserSecrets is a publicly released post‑exploitation tool that harvests credentials and session tokens from major browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox). It bypasses modern protections such as Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface, supports DPAPI and NSS decryption paths, and includes operational evasion features; the tool outputs structured JSON suitable for rapid cloud account takeover and lateral movement, and the report covers usage, detection opportunities, and mitigation.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
