logo

Intrusion Detection and Log Analysis with iptables

ID: ad60cf8a-f9d6-5d75-bea8-c8a2e7526429

STIX ID: report--ad60cf8a-f9d6-5d75-bea8-c8a2e7526429

Feed Name: Darknet

Threat Score
80/100

Date Published: 2008-09-16

Date Updated: 2026-05-18

...
...

DumpBrowserSecrets is a publicly available post‑exploitation tool designed to extract credentials and session data from major browsers (Chrome, Edge, Brave, Opera family, Vivaldi, and Firefox). It uses DLL injection and an IElevator COM interface bypass to defeat Chrome's App‑Bound Encryption, retrieves DPAPI and NSS encrypted secrets where applicable, and outputs structured JSON of cookies, saved logins, OAuth refresh tokens, credit cards, autofill data, history, and bookmarks—making it a high‑risk capability for cloud account takeover and lateral movement in compromised Windows hosts.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.