Security Layer & Intrusion Detection for PHP Based Web Applications
ID: efd63637-407c-5018-8507-eb651af72497
STIX ID: report--efd63637-407c-5018-8507-eb651af72497
Feed Name: Darknet
DumpBrowserSecrets is a Windows post-exploitation tool that harvests browser-stored secrets (cookies, saved logins, OAuth tokens, credit cards, autofill, history, bookmarks) from major Chromium-based browsers and Firefox. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface, retrieves DPAPI or NSS keys for other browsers, and writes structured JSON output; the report details operational evasion techniques, a realistic attack scenario, and detection/mitigation guidance.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
