logo

AIEngine – AI-driven Network Intrusion Detection System

ID: 4b362f7e-d95b-56ca-91ef-18a7f8a6fce4

STIX ID: report--4b362f7e-d95b-56ca-91ef-18a7f8a6fce4

Feed Name: Darknet

Threat Score
75/100

Date Published: 2019-11-25

Date Updated: 2026-05-08

...
...

DumpBrowserSecrets is a Windows post-exploitation credential-harvesting tool that extracts passwords, cookies, OAuth tokens, credit card data, and browsing history from major browsers. It bypasses Chrome's App-Bound Encryption by injecting a DLL into a headless Chromium process (Early Bird APC) to call the IElevator COM interface, handles DPAPI and NSS for other browsers, and includes evasion features aimed at red-team/assumed-breach testing while providing detection and mitigation guidance.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.