NPPSPYTool
NPPSPY is an implementation of a theoretical mechanism first presented in 2004 for capturing credentials submitted to a Windows system via a rogue Network Provider API item. NPPSPY captures credentials following submission and writes them to a file on the victim system for follow-on exfiltration.From MITRE ATT&CK
Last reported 4 years ago, by Huntress1 report
ATT&CK techniques
1 technique · each with the sentence it comes from- T1003OS Credential Dumping
“OS Credential Dumping - ATT&CK T1003”
What the reports say
1 report, newest first · the exact sentence from each-
Gifting User Passwords to Adversaries With NPPSPY“Gifting User Passwords to Adversaries With NPPSPY”
Thanks — we review every report.