logo

Scallion – GPU Based Onion Hash Generator

ID: 1110bcae-9975-50d7-9b19-2f7f825983bf

STIX ID: report--1110bcae-9975-50d7-9b19-2f7f825983bf

Feed Name: Darknet

Threat Score
75/100

Date Published: 2020-01-09

Date Updated: 2026-05-08

...
...

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries and browsing history from major browsers (Chrome, Edge, Brave, Opera family, Vivaldi, and Firefox). It implements an App-Bound Encryption bypass for Chromium-based browsers by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface, includes evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication), outputs structured JSON, and is presented as a red-team tool with detection and mitigation recommendations.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.