Twitter Major Password Reset After Phishing Attack

DumpBrowserSecrets is a public post-exploitation tool that extracts browser-stored credentials (cookies, saved logins, OAuth refresh tokens, credit cards, autofill data, history, and bookmarks) from Chromium-based browsers and Firefox on Windows. It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface (Early Bird APC injection), handles DPAPI for some Chromium forks and NSS for Firefox, includes evasion features for EDR, and outputs structured JSON for red-team or offensive use while the report outlines detection and mitigation strategies.