logo

Visa Security Flaws Prior to Consumer Release

ID: f6990962-aecf-5ece-a538-1afcffd1535a

STIX ID: report--f6990962-aecf-5ece-a538-1afcffd1535a

Feed Name: Darknet

Threat Score
75/100

Date Published: 2007-01-30

Date Updated: 2026-05-08

...
...

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that targets major Windows browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox) to extract saved passwords, session cookies, OAuth tokens, credit card data, autofill entries and history. It implements an App-Bound Encryption bypass for Chromium-based browsers by spawning a headless Chromium process and injecting a DLL via Early Bird APC to use the IElevator COM interface, handles DPAPI and NSS decryption for other browsers, includes operational evasion techniques, outputs structured JSON, and is framed for red-team/assumed-breach use while highlighting detection and mitigation approaches.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.