logo

Hacking Tools, Hacker News & Cyber Security

ID: 726cabe9-34d7-5824-8c01-d6c94804818c

STIX ID: report--726cabe9-34d7-5824-8c01-d6c94804818c

Feed Name: Darknet

Threat Score
75/100

Date Published: 2015-11-30

Date Updated: 2026-05-08

...
...

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that targets Chromium-based browsers (Chrome, Edge, Brave) and Firefox to extract saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries and browsing history; it bypasses Chrome's App-Bound Encryption by injecting a DLL into a spawned headless Chromium process (using Early Bird APC and the IElevator COM interface) to decrypt keys, includes DPAPI and NSS handling for other browsers, and documents operational usage, evasion techniques, and detection/mitigation guidance.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.