logo

February Commenter of the Month Competition Winner!

ID: 3021db84-7f1d-553a-9103-a75fa5d38e21

STIX ID: report--3021db84-7f1d-553a-9103-a75fa5d38e21

Feed Name: Darknet

Threat Score
75/100

Date Published: 2008-03-05

Date Updated: 2026-05-12

...
...

DumpBrowserSecrets is a publicly available post‑exploitation tool that automates extraction of browser‑stored secrets from major Windows browsers (Chrome/Edge/Brave via an App‑Bound Encryption bypass using DLL injection and the IElevator COM interface; Opera/Vivaldi via DPAPI; Firefox via NSS decryption). It outputs structured JSON, includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, Early Bird APC injection, custom SQLite parsing), and is presented as a red‑team/latest‑threat testing utility but also represents a high‑impact credential theft capability for attackers.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.