China Policy Could Shut Out Foreign Security Firms

DumpBrowserSecrets is a publicly available post‑exploitation tool that extracts browser‑stored secrets (passwords, cookies, OAuth refresh tokens, credit cards, autofill and history) from major Windows browsers by bypassing Chrome’s App‑Bound Encryption (via DLL injection into a headless Chromium process and use of the IElevator COM interface) and using DPAPI or NSS decryption for other browsers; the report details its operational features, evasion techniques, supported browsers, detection opportunities, and mitigation recommendations.