logo

Worm Spreading Fast on Google’s Orkut Social Network

ID: dde88fb9-f48d-5fd9-b8ce-a969fd196276

STIX ID: report--dde88fb9-f48d-5fd9-b8ce-a969fd196276

Feed Name: Darknet

Threat Score
75/100

Date Published: 2007-12-20

Date Updated: 2026-05-12

...
...

DumpBrowserSecrets is a post‑exploitation Windows tool that harvests credentials and session tokens from major browsers (Chrome, Edge, Brave, Opera family, Vivaldi, Firefox). It bypasses Chrome App‑Bound Encryption by spawning a headless Chromium instance, injecting a DLL via Early Bird APC to call the IElevator COM interface and retrieve decryption keys, uses DPAPI/NSS methods for other browsers, and outputs structured JSON; the tool includes multiple EDR-evasion techniques designed for red-team assessments but represents a high-impact credential-theft capability if misused.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.