Malwarebytes Bug Bounty Program Goes Live

DumpBrowserSecrets is a Windows post-exploitation tool that extracts browser-stored credentials and session tokens from Chrome/Edge/Brave (using an App-Bound Encryption bypass via DLL injection into a headless Chromium process and the IElevator COM interface), Opera/Opera GX/Vivaldi (DPAPI), and Firefox (NSS). It outputs structured JSON, includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parser), and is intended for red team/assumed-breach testing while also illustrating real attacker capabilities for cloud account takeover and lateral movement; the report covers usage, detection opportunities, and mitigations.