TTPwire Vol. 1 · MITRE ATT&CK·Tagged

← All stories

SANS ISC Diaries

Cleartext Passwords in MS Edge? In 2026?, (Mon, May 4th)

1 day ago · Read original ↗

ATT&CK techniques detected

3 predictions
T1555.003Credentials from Web Browsers
100%
“##https " looking a bit down in the output ( since comhttps does match more stuff in the memory dump than just the credential list ), i see : as you can see, edge isn ' t my primary browser, but i do use it a fair bit for azure work. and yes, this is a real session, so i cropped …”
T1555.003Credentials from Web Browsers
94%
“cleartext passwords in ms edge & # x3f ; in 2026 & # x3f ;, ( mon, may 4th ) cleartext passwords in ms edge? in 2026? yup, that is for real. for me, this started with a post in x at hxxps : / / x. com / intcyberdigest / status / 2051406295828250963? s = 61, which highlighted rese…”
T1003.001LSASS Memory
76%
“choose " create memory dump " navigate to where the dmp file is stored. if you haven ' t used strings before, you ' re in for a treat. strings is of course just part of most linux distros, but you can easily get a copy for windows as part of ms sysinternals, at https : / / learn.…”

Summary

Yup, that is for real.