logo

Acunetix Clamps Down On Costly Website Security With Online Solution

ID: c3677b4d-6e37-5f4f-ab19-067a1bcec6dc

STIX ID: report--c3677b4d-6e37-5f4f-ab19-067a1bcec6dc

Feed Name: Darknet

Threat Score
72/100

Date Published: 2015-03-05

Date Updated: 2026-05-08

...
...

DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests browser-stored credentials and session tokens from major Chromium- and Gecko-based browsers by using DLL injection (Early Bird APC) and the IElevator COM interface to bypass App‑Bound Encryption (Chrome/Edge/Brave) and by extracting DPAPI/NSS-protected secrets for other browsers; it outputs structured JSON and includes operational evasion features aimed at reducing EDR detection, making it a high-risk capability for cloud account takeover and lateral movement.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.