Google Launches Online Security & Malware Blog

DumpBrowserSecrets is a publicly documented post-exploitation credential-harvesting tool that targets Chromium- and Gecko-based browsers to extract saved passwords, cookies, OAuth refresh tokens, credit card data, and browsing history; it bypasses Chrome's App-Bound Encryption (Chrome 127+) by injecting a DLL into a headless Chromium process to call the IElevator COM interface, supports DPAPI and NSS decryption for other browsers, includes several runtime evasion techniques, and outputs structured JSON for rapid credential exfiltration and session replay testing.