logo

GnuPG Crypto Library libgcrypt Cracked Via Side-Channel

ID: 8ab8c08a-5fe4-59fd-b6ff-1defac3109de

STIX ID: report--8ab8c08a-5fe4-59fd-b6ff-1defac3109de

Feed Name: Darknet

Threat Score
75/100

Date Published: 2017-07-05

Date Updated: 2026-05-13

...
...

DumpBrowserSecrets is a publicly documented post-exploitation tool designed to extract browser-stored secrets (passwords, cookies, OAuth refresh tokens, credit cards, autofill, history, bookmarks) from Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox. It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL via Early Bird APC to use the IElevator COM interface, handles DPAPI and NSS decryption models for other browsers, includes multiple operational evasion techniques, outputs structured JSON, and is intended for red-team/assumed-breach testing while also representing a realistic threat if used by adversaries.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.