logo

Microsoft’s Anti-Malware Action Cripples Dynamic DNS Service No-IP

ID: 4aafd743-4af9-5843-9bc8-356c6ec6d8c8

STIX ID: report--4aafd743-4af9-5843-9bc8-356c6ec6d8c8

Feed Name: Darknet

Threat Score
75/100

Date Published: 2014-07-02

Date Updated: 2026-05-08

...
...

DumpBrowserSecrets is a Windows post-exploitation tool that harvests browser-stored secrets (passwords, session cookies, OAuth refresh tokens, credit cards, autofill, history) across Chromium-based and Firefox browsers. It bypasses Chrome's App-Bound Encryption by injecting a DLL into a headless Chromium process to use the IElevator COM interface, supports DPAPI and NSS decryption for other browsers, includes evasion techniques to reduce EDR detection, and outputs structured JSON for operators to replay sessions or validate credentials.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.