logo

LORCON (Loss Of Radio CONnectivity) 802.11 Packet Library

ID: 4d8b44e7-7ffd-519e-afe6-1dd0e6e3c950

STIX ID: report--4d8b44e7-7ffd-519e-afe6-1dd0e6e3c950

Feed Name: Darknet

Threat Score
75/100

Date Published: 2007-09-21

Date Updated: 2026-05-08

...
...

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool (available as precompiled Windows binaries) that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, history and bookmarks from Chromium‑based browsers and Firefox. It implements an App‑Bound Encryption bypass for Chrome/Edge/Brave by injecting a DLL into a headless Chromium process to use the IElevator COM interface, handles DPAPI for Opera/Vivaldi, and NSS for Firefox; the report covers its usage, evasion features, detection opportunities, and mitigation advice for defenders.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.