logo

Microsoft Puts Hold on Forefront Security Product Range

ID: 0584e204-c51b-54e3-b01a-8fd6eeeaa91a

STIX ID: report--0584e204-c51b-54e3-b01a-8fd6eeeaa91a

Feed Name: Darknet

Threat Score
75/100

Date Published: 2009-04-08

Date Updated: 2026-05-08

...
...

DumpBrowserSecrets is a publicly released post‑exploitation tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, history, and bookmarks from major browsers. It bypasses Chromium App‑Bound Encryption (Chrome 127+) by spawning a headless Chromium process and performing Early Bird APC DLL injection to call the IElevator COM interface, retrieves DPAPI keys for some browsers, and uses NSS decryption for Firefox; the tool includes multiple operational evasion techniques and outputs structured JSON for red team use.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.