Google’s Blogger Platform Used to Aid Phishing Attacks

DumpBrowserSecrets is a publicly available post-exploitation tool that harvests browser-stored credentials and session tokens across Chromium-based and Firefox browsers by spawning a headless Chromium process, injecting a DLL to leverage the IElevator COM interface (bypassing App-Bound Encryption), and parsing/decrypting on-disk browser stores; it includes DPAPI/NSS handling and multiple evasion techniques and outputs structured JSON, making it a high-risk capability for account takeover and lateral movement in enterprise environments.