High Tech Ticket Scalpers Earn $25 Million Profits

DumpBrowserSecrets is a publicly available post-exploitation tool (and accompanying DLL) that harvests browser-stored secrets from major Windows browsers by bypassing Chrome's App-Bound Encryption (via headless Chromium + DLL injection using the IElevator COM interface) and extracting DPAPI- or NSS-protected data for other browsers; it outputs structured JSON of saved passwords, session cookies, OAuth refresh tokens, credit cards, autofill data and history, includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), and is presented as a red-team-oriented capability with guidance on detection and mitigation.