Go BLUE! A Protection Plan for Credentials in Chromium-based Browsers
Tags
cmtmf-attack-pattern: Code Injection
country: North Korea
attack-pattern: Data Direct Adversary-In-The-Middle - T1557 Code Injection - T1540 Credentials - T1589.001 Credentials From Password Stores - T1555 Dll Side-Loading - T1574.002 Hooking - T1617 Keylogging - T1056.001 Keylogging - T1417.001 Malware - T1587.001 Malware - T1588.001 Rundll32 - T1218.011 Server - T1583.004 Server - T1584.004 Steal Web Session Cookie - T1539 Tool - T1588.002 Vulnerabilities - T1588.006 Man In The Browser - T1185 Dll Side-Loading - T1073 Hooking - T1179 Input Capture - T1056 Rootkit - T1014 Rundll32 - T1085 Hooking Rootkit
Show in Graph
Common Information
Type Value
UUID d39cf600-839e-4ba6-8c2a-ea9ce303d181
Fingerprint 9f320c10c8357305
Analysis status DONE
Considered CTI value 2
Text language
Published June 8, 2022, midnight
Added to db Dec. 18, 2024, 7:58 p.m.
Last updated Dec. 21, 2024, 9:08 a.m.
Headline Go BLUE! A Protection Plan for Credentials in Chromium-based Browsers
Title Go BLUE! A Protection Plan for Credentials in Chromium-based Browsers
Detected Hints/Tags/Attributes 71/3/14
Source URLs
Redirection Url
Details Source https://www.cyberark.com/resources/threat-research-blog/go-blue-a-protection-plan-for-credentials-in-chromium-based-browsers
URL Provider
Details Provider Source level domain
Details cyberark.com www.cyberark.com
Attributes
Details Type #Events CTI Value
Details Domain 8 
chromium.org
Details File 289 
chrome.exe
Details File 136 
msedge.exe
Details File 9 
tar.exe
Details File 2328 
cmd.exe
Details File 1 
newchrome.exe
Details File 122 
taskmgr.exe
Details File 5 
chromedriver.exe
Details File 16 
chrome_elf.dll
Details MITRE ATT&CK Techniques 187 
T1555
Details MITRE ATT&CK Techniques 106 
T1539
Details MITRE ATT&CK Techniques 30 
T1185
Details MITRE ATT&CK Techniques 163 
T1056
Details MITRE ATT&CK Techniques 25 
T1557