DNS DDoS Attack Takes Down China Internet

DumpBrowserSecrets is a publicly described post-exploitation tool that harvests browser-stored credentials and session material from major Windows browsers (Chrome/Edge/Brave via App-Bound Encryption bypass, Opera/Vivaldi via DPAPI, and Firefox via NSS). The report documents the tool's architecture (an executable plus an injected DLL using Early Bird APC to call the IElevator COM interface), extracted data types (cookies, OAuth refresh tokens, saved logins, credit cards, autofill, history), operational evasion features, usage examples for red-team/assumed-breach scenarios, and recommended detection and mitigation approaches.