logo

Google Buzz Patches XSS Flaw In Mobile Version

ID: 69db4ab2-19dd-5748-8412-1e76e83225f9

STIX ID: report--69db4ab2-19dd-5748-8412-1e76e83225f9

Feed Name: Darknet

Threat Score
75/100

Date Published: 2010-02-17

Date Updated: 2026-05-12

...
...

This report describes DumpBrowserSecrets, a publicly available Windows post‑exploitation tool that harvests browser‑stored secrets (saved passwords, session cookies, OAuth refresh tokens, credit cards, autofill and history) from Chrome/Edge/Brave (App‑Bound Encryption bypass via headless Chromium + IElevator COM and DLL injection), Opera/Vivaldi (DPAPI), and Firefox (NSS), and documents its evasion techniques, detection opportunities, and mitigation recommendations.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.