TJX Hacker Albert “Segvec” Gonzalez Indicted By Federal Grand Jury

DumpBrowserSecrets is a public post-exploitation tool that extracts browser-stored secrets (saved credentials, cookies, OAuth tokens, credit cards, autofill, history, and bookmarks) from Chromium-based browsers and Firefox by bypassing App‑Bound Encryption (using an IElevator COM interface inside an injected DLL via Early Bird APC) and by handling DPAPI/NSS decryption for other browsers; the report covers capabilities, usage, evasion techniques, attack scenarios, detection indicators, and mitigation advice for enterprise environments.