Hackers Recreate NSA Snooping Kit Using Off-the-shelf Parts

DumpBrowserSecrets is a public post‑exploitation tool that harvests browser-stored credentials and session tokens from major Windows browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox) by using DLL injection into a headless Chromium process to bypass App‑Bound Encryption (via the IElevator COM interface) and by retrieving DPAPI or NSS-protected secrets; it outputs structured JSON and includes operational evasion features, making it a high-risk capability for enabling lateral movement and cloud account takeover in compromised environments.