logo

Ubiquiti Wi-Fi Gear Hackable Via 1997 PHP Version

ID: 3f97f065-f156-5138-bbc1-c2d73562d193

STIX ID: report--3f97f065-f156-5138-bbc1-c2d73562d193

Feed Name: Darknet

Threat Score
75/100

Date Published: 2017-03-17

Date Updated: 2026-05-13

...
...

DumpBrowserSecrets is a post-exploitation Windows tool that harvests saved credentials, session cookies, OAuth refresh tokens, credit card data and browsing history from major Chromium- and Gecko-based browsers. It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface, handles DPAPI and NSS encryption models for other browsers, includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication), and outputs structured JSON for red-team or adversary use, enabling rapid lateral movement and cloud account takeover from compromised endpoints.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.