Bitdefender Releases FREE GandCrab Ransomware Decryption Tool
ID: 9e1e59a0-768d-593c-b3b0-319d246fbcbd
STIX ID: report--9e1e59a0-768d-593c-b3b0-319d246fbcbd
Feed Name: Darknet
DumpBrowserSecrets is a publicly documented post‑exploitation tool that extracts credentials and session tokens from major browsers (Chrome, Edge, Brave, Opera family, Vivaldi, and Firefox). It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL via Early Bird APC to use the IElevator COM interface, handles DPAPI and NSS decryption for other browsers, and includes multiple operational evasion techniques; output is structured JSON for red-team use but enables rapid cloud account takeover and lateral movement if abused.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
