Google Revoking Trust In CNNIC Issued Certificates

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts saved logins, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from major Chromium-based and Firefox browsers. It implements an App-Bound Encryption bypass for Chrome/Edge/Brave by spawning a headless Chromium process and injecting a DLL via Early Bird APC injection to use the IElevator COM interface to decrypt keys, and uses DPAPI/NSS handling for other browsers. The tool includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication) and writes structured JSON output for red-team analysis; the report also outlines detection opportunities and mitigations.