160,000 Network Printers Hacked

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries and browsing history from major Chromium‑based browsers and Firefox on Windows. It implements an App‑Bound Encryption bypass for Chrome/Brave/Edge by injecting a DLL into a spawned headless Chromium process (using Early Bird APC injection) to access the IElevator COM interface and decrypt the app_bound_encrypted_key, handles DPAPI for Opera/Vivaldi, and uses NSS decryption for Firefox; the tool outputs structured JSON and includes several evasion features to reduce EDR detection, making it relevant for assessing credential exposure on compromised developer endpoints.