logo

Instagram Leak From API Spills High Profile User Info

ID: eaa07aa7-da4f-594c-ac3f-8c7124bdfb43

STIX ID: report--eaa07aa7-da4f-594c-ac3f-8c7124bdfb43

Feed Name: Darknet

Threat Score
75/100

Date Published: 2017-08-31

Date Updated: 2026-05-08

...
...

DumpBrowserSecrets is a post-exploitation tool that harvests credentials and session data from major browsers (Chrome/Edge/Brave, Opera variants, Vivaldi, and Firefox) by bypassing App-Bound Encryption (Chrome 127+) via an IElevator COM interface technique and Early Bird APC DLL injection into a headless Chromium process. The tool extracts cookies, saved logins, OAuth refresh tokens, credit cards, autofill data and history, writes structured JSON output, and includes evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parser). The report covers usage, detection opportunities, mitigation recommendations, and the tool's value for red-team assumed-breach exercises.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.