logo

Zeus Botmaster Targets Anonymous Supporters

ID: 6535cb11-afc0-5f1a-bd89-9b6d2c57d235

STIX ID: report--6535cb11-afc0-5f1a-bd89-9b6d2c57d235

Feed Name: Darknet

Threat Score
75/100

Date Published: 2012-03-05

Date Updated: 2026-05-08

...
...

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that extracts extensive browser‑stored secrets (passwords, cookies, OAuth tokens, credit cards, autofill, history) from Chromium‑based browsers and Firefox. It implements an App‑Bound Encryption bypass for modern Chrome/Edge/Brave by spawning a headless Chromium process and injecting a DLL via Early Bird APC to call the IElevator COM interface, handles DPAPI and NSS decryption for other browsers, and includes multiple evasion techniques; the report covers usage, detection opportunities, mitigation advice, and red‑team relevance.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.