Veterans Administration Chief Says Laptop Recovered

DumpBrowserSecrets is a publicly available post‑exploitation tool that extracts browser-stored credentials (passwords, cookies, OAuth tokens, credit cards, autofill, history, bookmarks) from Chrome, Edge, Brave, Opera-family browsers and Firefox. It implements an App‑Bound Encryption bypass for Chromium browsers by spawning a headless Chromium process and injecting a DLL via Early Bird APC to call the IElevator COM interface, supports DPAPI and NSS decryption for other browsers, includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication, custom SQLite parser), and is positioned as a red‑team utility with clear detection and mitigation guidance.