logo

Spammer gets 8 years in Jail for Identity theft

ID: 71df42d7-18ca-5ea2-9804-6f864f39e188

STIX ID: report--71df42d7-18ca-5ea2-9804-6f864f39e188

Feed Name: Darknet

Threat Score
75/100

Date Published: 2006-03-24

Date Updated: 2026-05-12

...
...

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from major browsers (Chrome, Edge, Brave, Opera, Opera GX, Vivaldi, Firefox). It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface, handles DPAPI and NSS decryption for other browsers, outputs structured JSON suitable for red team use, and includes evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication) while also noting detection and mitigation approaches.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.