NASA Systems At Risk From Hacking Attacks

DumpBrowserSecrets is a publicly released post‑exploitation tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from major Chromium- and Gecko-based browsers on Windows. It implements an App‑Bound Encryption bypass for Chrome/Edge/Brave by spawning a headless Chromium process and injecting a DLL (Early Bird APC) to use the IElevator COM interface to decrypt keys, uses DPAPI extraction for Opera/Opera GX/Vivaldi, and NSS decryption for Firefox; the tool includes multiple operational evasion features and is intended for red-team/assumed‑breach testing but poses a significant risk if abused.