logo

Fuzzilli – JavaScript Engine Fuzzing Library

ID: 607c64b4-2ae8-524c-8f2b-517b34f0410b

STIX ID: report--607c64b4-2ae8-524c-8f2b-517b34f0410b

Feed Name: Darknet

Threat Score
75/100

Date Published: 2020-10-22

Date Updated: 2026-05-08

...
...

DumpBrowserSecrets is a publicly documented post-exploitation credential-harvesting tool that extracts browser-stored secrets (cookies, saved logins, OAuth refresh tokens, credit cards, autofill data, history, bookmarks) from major Chromium-based browsers and Firefox on Windows; it bypasses Chrome's App-Bound Encryption by injecting a DLL into a headless Chromium process to use the IElevator COM interface and includes multiple operational evasion techniques, making it a high-risk capability for account takeover and lateral movement in enterprise environments.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.