logo

Hotmail Exploit Has Been Silently Stealing E-mail

ID: 613fe4bb-8f9f-584b-b34f-b757f139d382

STIX ID: report--613fe4bb-8f9f-584b-b34f-b757f139d382

Feed Name: Darknet

Threat Score
75/100

Date Published: 2011-05-24

Date Updated: 2026-05-12

...
...

DumpBrowserSecrets is a post‑exploitation browser credential-harvesting tool that targets Chromium-based browsers (Chrome, Edge, Brave) and Firefox, capable of bypassing Chrome's App‑Bound Encryption by injecting a DLL into a headless Chromium process to retrieve encryption keys via the IElevator COM interface; it also handles DPAPI and NSS-protected data, extracts cookies, saved logins, OAuth tokens, credit cards and history, outputs structured JSON, and includes multiple evasion features alongside detection and mitigation guidance.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.