Microsoft got Defaced

DumpBrowserSecrets is a post-exploitation credential-extraction tool that targets major browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, Firefox) to recover saved passwords, cookies, OAuth refresh tokens, credit card data, autofill entries and history. It uses DLL injection into a headless Chromium process and the IElevator COM interface to bypass App-Bound Encryption (Chrome 127+), retrieves DPAPI/NSS secrets where applicable, includes operational evasion features, and outputs structured JSON for red-team or malicious use while the report also outlines detection and mitigation strategies.