Amazon Disputes Hacker Claims of Ranking Manipulation

DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests browser-stored credentials, cookies, OAuth refresh tokens, credit card data, and browsing history from major Chromium-based and Firefox browsers on Windows. It implements an App‑Bound Encryption bypass for Chrome/Edge/Brave by injecting a DLL into a headless Chromium process and using the IElevator COM interface to decrypt keys, handles DPAPI and NSS-based stores for other browsers, and includes operational evasion features; the report describes usage, detection opportunities, and mitigation recommendations.