logo

Seattle Computer Security Expert Turns Tables On The Police

ID: 47e2544c-71a7-5266-b42d-5cf33a3fb517

STIX ID: report--47e2544c-71a7-5266-b42d-5cf33a3fb517

Feed Name: Darknet

Threat Score
70/100

Date Published: 2010-04-26

Date Updated: 2026-05-11

...
...

DumpBrowserSecrets is a Windows post‑exploitation tool that harvests browser-stored secrets (passwords, cookies, OAuth refresh tokens, credit cards, autofill and history) from Chromium-based and Firefox browsers; it bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL (Early Bird APC + IElevator COM) to decrypt encryption keys, includes DPAPI/NSS handling for other browsers, outputs structured JSON, and includes several operational evasion techniques along with detection and mitigation advice.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.