logo

Happy 1 Year Anniversary to the Relaunch of Darknet

ID: 718133d0-4020-5057-b89d-4a022d2a5787

STIX ID: report--718133d0-4020-5057-b89d-4a022d2a5787

Feed Name: Darknet

Threat Score
75/100

Date Published: 2007-02-07

Date Updated: 2026-05-08

...
...

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from major browsers (Chrome/Edge/Brave via App-Bound Encryption bypass, Opera/Opera GX/Vivaldi via DPAPI, and Firefox via NSS). The README documents usage, DLL injection via Early Bird APC into a headless Chromium process to leverage the IElevator COM interface, multiple evasion features (string obfuscation, API hashing, PPID/argument spoofing), an attack scenario demonstrating rapid credential extraction, and recommended detection and mitigation strategies.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.