logo

Anteater – CI/CD Security Gate Check Framework

ID: 571952d5-5a19-572f-9785-c970db49a265

STIX ID: report--571952d5-5a19-572f-9785-c970db49a265

Feed Name: Darknet

Threat Score
70/100

Date Published: 2019-08-30

Date Updated: 2026-05-08

...
...

DumpBrowserSecrets is a Windows post‑exploitation tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries and browsing history from Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL (Early Bird APC) to use the IElevator COM interface to decrypt keys, handles DPAPI and NSS for other browsers, includes multiple operational evasion features, and outputs structured JSON for red team or adversary use; the report details detection opportunities and mitigations.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.