logo

Cisco & Microsoft Patch TCP Stack DoS Exploit

ID: db0a6e83-8e55-5e4e-a810-fa395780619c

STIX ID: report--db0a6e83-8e55-5e4e-a810-fa395780619c

Feed Name: Darknet

Threat Score
75/100

Date Published: 2009-09-08

Date Updated: 2026-05-14

...
...

DumpBrowserSecrets is a Windows post‑exploitation tool that extracts browser‑stored secrets (saved logins, cookies, OAuth refresh tokens, credit cards, autofill, history, and bookmarks) from Chromium‑based browsers and Firefox. It implements an App‑Bound Encryption bypass for Chrome/Edge/Brave by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface, handles DPAPI for Opera/Vivaldi and NSS for Firefox, and includes operational evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication). The report evaluates red‑team relevance, attack scenarios (rapid credential extraction and session replay), and provides detection and mitigation recommendations focused on monitoring IElevator usage, unexpected process injection, and protecting browser‑stored secrets.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.