Teenage Bot Herder Admits to Infecting Military Computers

DumpBrowserSecrets is a Windows post‑exploitation tool for extracting browser‑stored secrets (saved credentials, session cookies, OAuth refresh tokens, credit cards, autofill data, history, and bookmarks) from Chrome, Edge, Brave, Opera family, Vivaldi, and Firefox. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface to decrypt keys, uses DPAPI/NSS handling for other browsers, includes operational evasion (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication), outputs structured JSON, and is positioned for red‑team/assumed‑breach testing while representing capabilities attackers could abuse for cloud account takeover and lateral movement.