logo

AIDE – Lightweight Linux Host Intrusion Detection

ID: cf90b8e6-cbd8-5863-a6be-48b0005a300f

STIX ID: report--cf90b8e6-cbd8-5863-a6be-48b0005a300f

Feed Name: Darknet

Threat Score
75/100

Date Published: 2025-05-26

Date Updated: 2026-05-11

...
...

DumpBrowserSecrets is a public post‑exploitation tool that harvests browser‑stored secrets (saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, history, bookmarks) from Chromium‑based browsers and Firefox. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process, injecting a DLL via Early Bird APC to call the IElevator COM interface, and decrypting stored credentials; the tool includes DPAPI/NSS handling, evasion techniques, and outputs structured JSON for red‑team use and detection testing.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.