Hackers Exploit Unpatched Firefox 0day Using Nobel Peace Prize Website

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that targets major browsers (Chrome, Edge, Brave, Opera, Opera GX, Vivaldi, and Firefox) to extract saved passwords, cookies, OAuth refresh tokens, credit card numbers, autofill data, and history. It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL that uses the IElevator COM interface to decrypt the app_bound_encrypted_key, uses DPAPI/NSS techniques for other browsers, includes multiple operational evasion features, and outputs structured JSON for red-team or adversary use while the report outlines detection and mitigation strategies.