logo

Facebook Apps Leaking Personal Data To Third Parties

ID: 023025f7-c90c-5afe-8431-dfef39b4937e

STIX ID: report--023025f7-c90c-5afe-8431-dfef39b4937e

Feed Name: Darknet

Threat Score
75/100

Date Published: 2010-10-19

Date Updated: 2026-05-08

...
...

DumpBrowserSecrets is a Windows post‑exploitation tool that harvests saved credentials, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from major Chromium‑based browsers and Firefox. It implements an App‑Bound Encryption bypass for Chrome/Edge/Brave by injecting a DLL into a spawned headless Chromium process (using Early Bird APC and the IElevator COM interface) to decrypt keys, and uses DPAPI/NSS methods for other browsers; the tool includes multiple evasion features and outputs structured JSON for red‑team use.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.