logo

Open Source Keykeriki Captures Wireless Keyboard Traffic

ID: 9ecbf18b-165b-512f-8fe3-f7cd05e6ecfe

STIX ID: report--9ecbf18b-165b-512f-8fe3-f7cd05e6ecfe

Feed Name: Darknet

Threat Score
75/100

Date Published: 2010-04-01

Date Updated: 2026-05-12

...
...

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that extracts saved credentials, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from major Chromium‑based and Firefox browsers. It bypasses Chrome's App‑Bound Encryption by injecting a DLL into a headless Chromium process to call the IElevator COM interface, supports DPAPI and NSS decryption for other browsers, includes operational evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parser), and is presented for red‑team assumed‑breach testing while also being relevant to adversary misuse and detection/mitigation planning.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.