logo

Call for Authors and New Members for Relaunch of Darknet

ID: a57bf700-90c5-50c9-9e56-2722754bde4b

STIX ID: report--a57bf700-90c5-50c9-9e56-2722754bde4b

Feed Name: Darknet

Threat Score
75/100

Date Published: 2006-02-12

Date Updated: 2026-05-12

...
...

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that targets Chromium‑based and Gecko‑based browsers on Windows to extract saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL (via Early Bird APC) to call the IElevator COM interface, and uses DPAPI/NSS methods where applicable; the tool is designed for red‑team use but contains operational evasion features relevant to real attacker tradecraft and therefore poses a serious credential theft risk to enterprise environments.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.