2 Different Hacker Groups Exploit The Same IE 0-Day

DumpBrowserSecrets is a Windows post-exploitation tool that harvests browser-stored credentials and session tokens from Chrome, Edge, Brave, Opera-family browsers, Vivaldi, and Firefox by bypassing App-Bound Encryption (via IElevator COM and Early Bird APC DLL injection) or using DPAPI/NSS decryption. The tool outputs structured JSON, includes multiple operational evasion techniques to reduce detection, and is presented for red-team/assumed-breach use but represents a high-risk capability for cloud account takeover and persistent access if used by attackers.