RIAA Dirty Tricks: Gathering Private Info On Kids Of Accused File Sharer

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card numbers, autofill entries, browsing history, and bookmarks from Chromium-based browsers (including a Chrome 127+ App-Bound Encryption bypass using IElevator via DLL injection into a headless Chromium process) and Firefox (NSS decryption). The report describes the tool's architecture, operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication), usage examples and attack scenarios, and provides detection and mitigation recommendations for enterprise defenders.