Scotland Yard Arrests Teenages For Involvement In Largest English Language Cybercrime Forum
ID: cfe68c8e-446c-5967-b8e3-d101426e3382
STIX ID: report--cfe68c8e-446c-5967-b8e3-d101426e3382
Feed Name: Darknet
DumpBrowserSecrets is a publicly distributed post‑exploitation tool that harvests browser‑stored credentials and session tokens from Chromium‑based browsers (including Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox. It bypasses Chrome's App‑Bound Encryption by injecting a DLL into a headless Chromium process to call the IElevator COM interface, extracts DPAPI/NSS keys where applicable, and outputs structured JSON of cookies, saved logins, OAuth refresh tokens, credit cards, autofill data, history, and bookmarks — enabling rapid lateral movement or cloud account takeover from a compromised host.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
