logo

Australian Privacy Commissioner Rules Google Wifi Actions Illegal

ID: 2eb688a9-382d-5427-aceb-69b230970d6c

STIX ID: report--2eb688a9-382d-5427-aceb-69b230970d6c

Feed Name: Darknet

Threat Score
70/100

Date Published: 2010-07-12

Date Updated: 2026-05-12

...
...

DumpBrowserSecrets is a publicly documented post‑exploitation tool that harvests browser‑stored secrets (passwords, session cookies, OAuth refresh tokens, credit card data, autofill and history) from major Windows browsers. It implements an App‑Bound Encryption bypass for Chromium browsers by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface to decrypt keys, handles DPAPI and NSS decryption for other browsers, includes multiple evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, file‑handle duplication), and outputs structured JSON intended for red‑team assessments but which also represents a high‑impact credential theft capability if used maliciously.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.