Over 7 Million Records Leaked (Children & Parents)

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts saved passwords, cookies, OAuth refresh tokens, credit card data and browsing history from major Chromium-based browsers and Firefox. The tool bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface (Early Bird APC injection), handles DPAPI and NSS decryption for other browsers, includes multiple EDR-evasion features, and outputs structured JSON for red team or adversary use; the report also describes detection opportunities and mitigations.