PGP Users Locked Out With Latest OS X Update

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that targets major Chromium‑based browsers (Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox to extract saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, history and bookmarks. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL via Early Bird APC to call the IElevator COM interface and retrieve the decryption key; DPAPI and NSS models are handled for other browsers. The tool outputs structured JSON, includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parsing), is presented as a red team utility, and the report includes detection opportunities and mitigation recommendations.