Yahoo! Fined 35 Million USD For Late Disclosure Of Hack

DumpBrowserSecrets is a publicly available post-exploitation tool that harvests browser-stored secrets (saved credentials, session cookies, OAuth refresh tokens, credit card data, autofill and history) from major Windows browsers. It bypasses Chrome/Edge/Brave App-Bound Encryption by spawning a headless Chromium instance and injecting a DLL to call the IElevator COM interface, uses DPAPI for Opera-derived browsers and NSS decryption for Firefox, and includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication). The tool outputs structured JSON for red-team use and presents a fast path to SaaS/cloud account takeover and lateral movement on compromised developer workstations.