Massive Celeb Leak Brings iCloud Security Into Question

DumpBrowserSecrets is a publicly documented post‑exploitation tool that harvests browser-stored secrets from Chrome/Edge/Brave (via an IElevator/App‑Bound Encryption bypass), Opera/Opera GX/Vivaldi (DPAPI), and Firefox (NSS), using techniques such as Early Bird APC DLL injection, headless browser spawning, handle duplication, and custom SQLite parsing to extract cookies, saved credentials, OAuth refresh tokens, credit card data, autofill entries and history into JSON for rapid credential theft and session replay.