logo

Shadow Brokers Release Dangerous NSA Hacking Tools

ID: ec633451-2cb8-5c6d-acf1-87ebbb8d9c18

STIX ID: report--ec633451-2cb8-5c6d-acf1-87ebbb8d9c18

Feed Name: Darknet

Threat Score
75/100

Date Published: 2017-04-19

Date Updated: 2026-05-13

...
...

DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests browser‑stored secrets (passwords, cookies, OAuth tokens, credit cards, autofill, history, bookmarks) from major Chromium browsers and Firefox by bypassing App‑Bound Encryption (via DLL injection into a headless Chromium process using Early Bird APC and the IElevator COM interface) and by extracting DPAPI/NSS keys where applicable; it includes multiple operational evasion features, outputs structured JSON for easy use, and is positioned for red‑team/testing but represents a significant real‑world risk if abused.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.