logo

Hackers Attack Root Servers and Slow Internet Key Traffic

ID: 6c0075cb-d6da-5cb0-9ceb-71de0e0a71e5

STIX ID: report--6c0075cb-d6da-5cb0-9ceb-71de0e0a71e5

Feed Name: Darknet

Threat Score
75/100

Date Published: 2007-03-26

Date Updated: 2026-05-08

...
...

DumpBrowserSecrets is a publicly documented post-exploitation tool designed to harvest browser-stored credentials and session data from major browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox). It bypasses Chrome's App-Bound Encryption by injecting a DLL into a headless Chromium process to invoke the IElevator COM interface, retrieves DPAPI/NSS secrets for other browsers, and outputs structured JSON of recovered credentials and tokens; the report also describes evasion techniques, an operator attack scenario, and recommended detection and mitigation approaches.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.