logo

Gary McKinnon Busted Because he Forgot the Time Difference

ID: d164d57b-0e47-53e8-bded-7054256f1dda

STIX ID: report--d164d57b-0e47-53e8-bded-7054256f1dda

Feed Name: Darknet

Threat Score
75/100

Date Published: 2006-04-30

Date Updated: 2026-05-13

...
...

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts saved credentials, session cookies, OAuth tokens, credit card data, and browsing artifacts from Chromium-based and Firefox browsers. It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL via Early Bird APC to use the IElevator COM interface, handles DPAPI and NSS decryption for other browsers, includes operational evasion features, and outputs structured JSON for red-team or adversary use while the report also provides detection and mitigation guidance.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.