Sprint Adds Google Wallet Into New NFC Capable Phones

DumpBrowserSecrets is a publicly documented post-exploitation tool that harvests browser-stored credentials and session data from major Chromium-based browsers and Firefox, including an App-Bound Encryption bypass for Chrome 127+ via headless Chromium spawning and DLL injection using the IElevator COM interface. The report outlines supported browsers, extracted data types (cookies, saved logins, OAuth refresh tokens, credit cards, autofill, history), operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), an attack scenario demonstrating rapid credential extraction and session replay, and detection/mitigation recommendations such as monitoring IElevator calls, headless browser instantiation, and restricting browser-stored secrets in favor of dedicated credential managers.