WikiLeaks Exposes Massive CIA Leak Including Hacking Tools

DumpBrowserSecrets is a publicly available post‑exploitation tool that extracts browser‑stored credentials and session data (cookies, OAuth tokens, saved passwords, credit cards, autofill, history, bookmarks) from major Chromium‑based browsers and Firefox on Windows by using techniques including Early Bird APC DLL injection into a headless Chromium process to leverage the IElevator COM interface and bypass App‑Bound Encryption, plus DPAPI/NSS extraction for other browsers; it includes runtime evasion features and outputs structured JSON for red‑team use, and the report provides detection and mitigation guidance such as monitoring IElevator COM calls, unexpected headless browsers, and non‑browser reads of browser SQLite databases.