attack.t1555.003

SQLite Chromium Profile Data DB Access

Dec 1, 2023 · attack.credential_access attack.t1539 attack.t1555.003 attack.collection attack.t1005 ·

Detect usage of the "sqlite" binary to query databases in Chromium-based browsers for potential data stealing.

Potential Browser Data Stealing

Oct 18, 2023 · attack.credential_access attack.t1555.003 ·

Adversaries may acquire credentials from web browsers by reading files specific to the target browser. Web browsers commonly save credentials such as website usernames and passwords so that they do not need to be entered manually in the future. Web browsers typically store the credentials in an encrypted format within a credential store.

PUA - WebBrowserPassView Execution

Feb 16, 2023 · attack.credential_access attack.t1555.003 ·

Share on:

Detects the execution of WebBrowserPassView.exe. A password recovery tool that reveals the passwords stored by the following Web browsers, Internet Explorer (Version 4.0 - 11.0), Mozilla Firefox (All Versions), Google Chrome, Safari, and Opera

Access to Browser Login Data

Jan 27, 2023 · attack.credential_access attack.t1555.003 ·

Share on:

Adversaries may acquire credentials from web browsers by reading files specific to the target browser. Web browsers commonly save credentials such as website usernames and passwords so that they do not need to be entered manually in the future. Web browsers typically store the credentials in an encrypted format within a credential store.