logo

Security Layer & Intrusion Detection for PHP Based Web Applications

ID: efd63637-407c-5018-8507-eb651af72497

STIX ID: report--efd63637-407c-5018-8507-eb651af72497

Feed Name: Darknet

Threat Score
75/100

Date Published: 2008-02-12

Date Updated: 2026-05-08

...
...

DumpBrowserSecrets is a Windows post-exploitation tool that harvests browser-stored secrets (cookies, saved logins, OAuth tokens, credit cards, autofill, history, bookmarks) from major Chromium-based browsers and Firefox. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface, retrieves DPAPI or NSS keys for other browsers, and writes structured JSON output; the report details operational evasion techniques, a realistic attack scenario, and detection/mitigation guidance.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.