logo

Network Activity Monitor with Web Interface

ID: 5db66525-3f73-5831-86bd-a4dbaf03fabc

STIX ID: report--5db66525-3f73-5831-86bd-a4dbaf03fabc

Feed Name: Darknet

Threat Score
75/100

Date Published: 2007-09-19

Date Updated: 2026-05-12

...
...

DumpBrowserSecrets is a Windows post-exploitation tool that harvests browser-stored credentials (passwords, cookies, OAuth tokens, credit cards, autofill, history, bookmarks) from Chromium-based and Gecko-based browsers by using techniques such as spawning a headless Chromium process, Early Bird APC DLL injection to invoke the IElevator COM interface (bypassing App-Bound Encryption), DPAPI and NSS decryption, and multiple operational evasion features; it is intended for red-team/assumed-breach testing but represents a high-risk capability for cloud account takeover and lateral movement if used maliciously.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.