logo

DarkMarket Carding (Credit Card Fraud) Site Part of FBI Sting

ID: c32021ee-c463-5f9e-83d4-de4f8089e8fa

STIX ID: report--c32021ee-c463-5f9e-83d4-de4f8089e8fa

Feed Name: Darknet

Threat Score
80/100

Date Published: 2008-10-20

Date Updated: 2026-05-12

...
...

DumpBrowserSecrets is a publicly available post-exploitation tool that harvests browser-stored credentials and session data from major browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox). It bypasses Chrome's App-Bound Encryption by injecting a DLL into a headless Chromium process to invoke the IElevator COM interface (and uses DPAPI/NSS handling for other browsers), extracts cookies, saved logins, OAuth tokens, credit cards, and autofill data, includes several EDR-evasion techniques, completes extraction rapidly, and is intended for red team/assumed-breach testing but presents a significant credential-theft risk if misused.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.