Researchers Crack 4096-bit RSA Encryption With a Microphone

DumpBrowserSecrets is a publicly documented post-exploitation credential-harvesting tool designed for Windows that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from Chrome, Edge, Brave, Opera, Opera GX, Vivaldi, and Firefox. It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface, supports DPAPI and NSS decryption for other browsers, includes multiple evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), outputs structured JSON, and is positioned for red-team/assumed-breach testing while also representing a high-risk capability if used by malicious actors.