European Banks Seeing New Wave Of ATM Skimming

DumpBrowserSecrets is a publicly documented post‑exploitation tool that harvests browser‑stored secrets (saved logins, session cookies, OAuth tokens, credit cards, autofill, history, bookmarks) from Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox. It implements an App‑Bound Encryption bypass for Chromium browsers by spawning a headless Chromium process and injecting a DLL that invokes the IElevator COM interface to decrypt keys, supports DPAPI and NSS decryption where applicable, and includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parsing). The report covers usage, attack scenarios, detection opportunities (process injection, headless browser instantiation, IElevator calls, reads of browser SQLite files), and mitigation advice such as moving secrets out of browsers and improving EDR visibility.