logo

Test Credential Validity of Dumped Credentials

ID: afb36cd5-ba0a-51b7-9376-990b7ac9c6be

STIX ID: report--afb36cd5-ba0a-51b7-9376-990b7ac9c6be

Feed Name: Darknet

Threat Score
75/100

Date Published: 2022-01-05

Date Updated: 2026-05-08

...
...

DumpBrowserSecrets is a post-exploitation credential-extraction tool for Windows that targets Chromium-based and Firefox browsers to harvest saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries and history. It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface, handles DPAPI and NSS for other browsers, outputs structured JSON, includes operational evasion techniques, and the report outlines detection opportunities and mitigations.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.