logo

Advanced Clickjacking & Frame Slicing Attack Tool

ID: 5e8a29e9-a815-5a24-8c10-2a3819abfbc6

STIX ID: report--5e8a29e9-a815-5a24-8c10-2a3819abfbc6

Feed Name: Darknet

Threat Score
75/100

Date Published: 2018-02-26

Date Updated: 2026-05-08

...
...

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from major browsers (Chrome, Edge, Brave, Opera, Opera GX, Vivaldi, and Firefox). It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface to decrypt encryption keys, includes multiple operational evasion features to reduce EDR detection, writes structured JSON output, and is positioned for red team or offensive use to demonstrate the risk of browser-stored secrets for cloud account takeover and lateral movement.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.