logo

Who is Navaho Gunleg?

ID: 789bf550-6157-5a20-883b-f7fce784b52e

STIX ID: report--789bf550-6157-5a20-883b-f7fce784b52e

Feed Name: Darknet

Threat Score
70/100

Date Published: 2006-02-28

Date Updated: 2026-05-12

...
...

DumpBrowserSecrets is a publicly documented post-exploitation tool that harvests browser-stored secrets (saved logins, cookies, OAuth tokens, credit cards, autofill, history, bookmarks) across Chrome, Edge, Brave, Opera, Opera GX, Vivaldi and Firefox by combining headless Chromium spawning, Early Bird APC DLL injection and an IElevator COM interface bypass to defeat App‑Bound Encryption (with DPAPI/NSS handling for other browsers); it outputs structured JSON and includes operational evasion features, detection guidance, and mitigation recommendations.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.