logo

Merry Christmas & A Happy New Year 2017

ID: 1b9a8535-b0c7-5cec-8fb6-8818b03cfcab

STIX ID: report--1b9a8535-b0c7-5cec-8fb6-8818b03cfcab

Feed Name: Darknet

Threat Score
75/100

Date Published: 2016-12-24

Date Updated: 2026-05-13

...
...

DumpBrowserSecrets is a Windows post-exploitation tool that harvests browser-stored secrets (saved passwords, cookies, OAuth tokens, credit cards, autofill, history) across Chromium-based and Firefox browsers by bypassing App-Bound Encryption (via spawning a headless Chromium process and DLL injection using Early Bird APC to call the IElevator COM interface) or extracting DPAPI/NSS keys; it includes multiple operational evasion features, outputs structured JSON, and is positioned for red-team/assumed-breach use while demonstrating a realistic threat to enterprise SaaS and developer workstations.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.