logo

Multithreaded Asynchronous Packet Parsing/Injecting

ID: 3e3f7f37-7aca-5d0a-9247-5095c1f88f78

STIX ID: report--3e3f7f37-7aca-5d0a-9247-5095c1f88f78

Feed Name: Darknet

Threat Score
70/100

Date Published: 2013-11-22

Date Updated: 2026-05-12

...
...

DumpBrowserSecrets is a public post-exploitation tool that harvests saved credentials, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from major Chromium-based browsers and Firefox. It implements an App-Bound Encryption bypass for Chrome/Edge/Brave by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface, uses DPAPI extraction for Opera/Vivaldi variants, and handles Firefox via NSS decryption; output is structured JSON for red-team use and includes multiple evasion features to resist EDR detection.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.