logo

Norton Internet Security ‘Keylogger’ IRC Bug

ID: 3637c712-bdf8-5c77-82f7-635e726d4431

STIX ID: report--3637c712-bdf8-5c77-82f7-635e726d4431

Feed Name: Darknet

Threat Score
75/100

Date Published: 2006-03-02

Date Updated: 2026-05-08

...
...

DumpBrowserSecrets is a publicly available post-exploitation credential-stealing tool that targets Chromium-based and Firefox browsers to extract saved credentials, session cookies, OAuth tokens, credit card details and browsing data by bypassing App-Bound Encryption (via IElevator COM) and DPAPI/NSS protections; it uses Early Bird APC DLL injection into a headless Chromium process, includes multiple operational evasion techniques, outputs structured JSON for operators, and is intended for red-team/assumed-breach use but can be misused by adversaries.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.