Hacking Tools, Hacker News & Cyber Security
ID: d1992ce7-3ed5-5f57-a84a-457e920a0dc6
STIX ID: report--d1992ce7-3ed5-5f57-a84a-457e920a0dc6
Feed Name: Darknet
**DumpBrowserSecrets** is a post‑exploitation credential harvesting tool that extracts cookies, saved logins, OAuth refresh tokens, credit card data, autofill entries and browsing history from major browsers (Chrome, Edge, Brave, Opera family, Vivaldi, Firefox). It bypasses Chrome App‑Bound Encryption by spawning a headless Chromium process and performing Early Bird APC DLL injection to call the IElevator COM interface, uses DPAPI/NSS decryption for other browsers, and includes operational evasion features; the report covers capabilities, attack scenarios, detection opportunities and mitigations.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
