UK ISP TalkTalk Monitoring Users Without Consent (Deep Packet Inspection)
ID: f0775720-9d95-5665-a93c-933eafd384f3
STIX ID: report--f0775720-9d95-5665-a93c-933eafd384f3
Feed Name: Darknet
DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests browser-stored secrets (saved logins, cookies, OAuth refresh tokens, credit cards, autofill data, history, bookmarks) from Chromium-based browsers and Firefox; it implements a sophisticated App‑Bound Encryption bypass for Chrome/Edge/Brave via DLL injection into a headless browser process using Early Bird APC and the IElevator COM interface, supports DPAPI and NSS decryption for other browsers, includes evasion techniques for EDRs, and outputs structured JSON for red‑team or adversary use.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
