Visa Security Flaws Prior to Consumer Release
ID: f6990962-aecf-5ece-a538-1afcffd1535a
STIX ID: report--f6990962-aecf-5ece-a538-1afcffd1535a
Feed Name: Darknet
DumpBrowserSecrets is a post-exploitation credential-harvesting tool that targets major Windows browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox) to extract saved passwords, session cookies, OAuth tokens, credit card data, autofill entries and history. It implements an App-Bound Encryption bypass for Chromium-based browsers by spawning a headless Chromium process and injecting a DLL via Early Bird APC to use the IElevator COM interface, handles DPAPI and NSS decryption for other browsers, includes operational evasion techniques, outputs structured JSON, and is framed for red-team/assumed-breach use while highlighting detection and mitigation approaches.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
