logo

Double For Your Money With Acunetix Vulnerability Scanner

ID: ad28a4ba-6c69-5e01-a4cc-305b01b1cf3b

STIX ID: report--ad28a4ba-6c69-5e01-a4cc-305b01b1cf3b

Feed Name: Darknet

Threat Score
75/100

Date Published: 2015-05-07

Date Updated: 2026-05-08

...
...

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts saved passwords, cookies, OAuth refresh tokens, credit card numbers and other browser-stored secrets from Chromium-based browsers (Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox. The tool bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL via Early Bird APC to call the IElevator COM interface, supports DPAPI/NSS for other browsers, includes multiple EDR-evasion techniques, and is presented with usage, detection opportunities, and mitigation advice for red-team and defensive validation.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.