Equifax Hack Blamed On Single Employee

DumpBrowserSecrets is a publicly documented post-exploitation tool that harvests browser-stored credentials and session tokens from major browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox). It bypasses Chrome's App-Bound Encryption by injecting a DLL into a headless Chromium process to use the IElevator COM interface, retrieves DPAPI or NSS-protected secrets as needed, and outputs structured JSON; the report covers technical details, evasion techniques, attack scenarios, and detection/mitigation recommendations.