logo

Web Infrastructure Fingerprinting & Delivery Tool

ID: 4cd68142-6261-5a83-a90e-c48ae8a7e92f

STIX ID: report--4cd68142-6261-5a83-a90e-c48ae8a7e92f

Feed Name: Darknet

Threat Score
75/100

Date Published: 2009-10-27

Date Updated: 2026-05-13

...
...

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts browser-stored secrets (saved logins, session cookies, OAuth refresh tokens, credit cards, autofill, history) across Chromium-based and Firefox browsers; it bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface, supports DPAPI and NSS decryption, includes multiple EDR-evasion techniques, and is intended for red-team assumed-breach assessments while also representing a credible threat if abused by adversaries.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.