logo

Facebook To Start Paying Bug Bounties

ID: 739478b7-24de-592e-912f-35f88d3572f2

STIX ID: report--739478b7-24de-592e-912f-35f88d3572f2

Feed Name: Darknet

Threat Score
78/100

Date Published: 2011-07-29

Date Updated: 2026-05-08

...
...

DumpBrowserSecrets is a Windows post‑exploitation tool that harvests browser‑stored secrets (saved logins, session cookies, OAuth refresh tokens, credit cards, autofill, history, and bookmarks) from Chromium‑based and Firefox browsers by bypassing App‑Bound Encryption (via DLL injection into a headless Chromium process and use of the IElevator COM interface), DPAPI, and NSS protections; it includes operational evasion features and outputs structured JSON for rapid credential abuse and session replay, representing a high risk for cloud and SaaS account takeover from compromised developer endpoints.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.