Worm Spreading Fast on Google’s Orkut Social Network
ID: dde88fb9-f48d-5fd9-b8ce-a969fd196276
STIX ID: report--dde88fb9-f48d-5fd9-b8ce-a969fd196276
Feed Name: Darknet
DumpBrowserSecrets is a post‑exploitation Windows tool that harvests credentials and session tokens from major browsers (Chrome, Edge, Brave, Opera family, Vivaldi, Firefox). It bypasses Chrome App‑Bound Encryption by spawning a headless Chromium instance, injecting a DLL via Early Bird APC to call the IElevator COM interface and retrieve decryption keys, uses DPAPI/NSS methods for other browsers, and outputs structured JSON; the tool includes multiple EDR-evasion techniques designed for red-team assessments but represents a high-impact credential-theft capability if misused.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
