logo

Terabytes Of US Military Social Media Spying S3 Data Exposed

ID: 55897717-d258-5532-91d4-70fb5446032e

STIX ID: report--55897717-d258-5532-91d4-70fb5446032e

Feed Name: Darknet

Threat Score
75/100

Date Published: 2017-11-18

Date Updated: 2026-05-08

...
...

DumpBrowserSecrets is a publicly documented post-exploitation tool that harvests browser-stored credentials and session tokens from major Chromium-based browsers (including Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox. It bypasses modern protections such as Chrome's App-Bound Encryption by spawning a headless Chromium instance and injecting a DLL via Early Bird APC to use the IElevator COM interface, and it implements DPAPI/NSS extraction for other browsers; the tool includes multiple evasion techniques and outputs structured JSON of extracted secrets for lateral movement and cloud account takeover testing.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.