logo

Stupid E-mails – Satilight Hacking, Website Cloning, Detailo & More!

ID: 125603c8-255f-565b-97fb-2aeb0b7b0f9d

STIX ID: report--125603c8-255f-565b-97fb-2aeb0b7b0f9d

Feed Name: Darknet

Threat Score
75/100

Date Published: 2014-10-10

Date Updated: 2026-05-08

...
...

DumpBrowserSecrets is a precompiled Windows post‑exploitation tool that extracts saved credentials, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from major browsers (Chrome/Edge/Brave via App‑Bound Encryption bypass, Opera/Vivaldi via DPAPI, and Firefox via NSS). The tool spawns a headless Chromium process and injects a DLL using Early Bird APC to access the IElevator COM interface and decrypt app_bound_encrypted_key, includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), writes structured JSON output, and is presented as a red‑team/assumed‑breach testing utility with guidance on detection and mitigation.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.