logo

Interpol Chief Ronald K. Noble Has Facebook Identity Stolen

ID: c64b7814-5185-59ca-86b3-1a85a4ac8366

STIX ID: report--c64b7814-5185-59ca-86b3-1a85a4ac8366

Feed Name: Darknet

Threat Score
80/100

Date Published: 2010-09-20

Date Updated: 2026-05-13

...
...

DumpBrowserSecrets is a post-exploitation browser credential-harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and history from Chrome, Edge, Brave, Opera-family browsers, Vivaldi, and Firefox; it implements an App-Bound Encryption bypass for Chromium-based browsers (via headless process DLL injection and the IElevator COM interface), includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, Early Bird APC injection, custom SQLite parser), outputs structured JSON per browser, and is positioned for red-team assumed-breach engagements but could be used by adversaries to enable cloud account takeover and lateral movement.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.