logo

RandIP – Network Mapper To Find Servers

ID: e0418012-3360-5a94-a58b-c1dac85e715a

STIX ID: report--e0418012-3360-5a94-a58b-c1dac85e715a

Feed Name: Darknet

Threat Score
75/100

Date Published: 2019-07-26

Date Updated: 2026-05-08

...
...

DumpBrowserSecrets is a publicly released post-exploitation tool that harvests browser-stored credentials across Chromium-based browsers and Firefox. It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface to decrypt encryption keys; for other browsers it retrieves DPAPI or NSS secrets. The tool extracts cookies, saved logins, OAuth refresh tokens, credit card data, autofill entries and history, includes multiple EDR-evasion techniques, and is positioned for red-team use but represents a high-risk capability if used by malicious actors.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.