Another Week Another Mass Domain Hijacking

DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests browser-stored credentials and tokens from Chromium-based browsers (including Chrome, Edge, Brave) and Firefox by combining a compiled executable with a DLL that is injected into a headless browser process to bypass App‑Bound Encryption (via the IElevator COM interface) and retrieve encryption keys; it supports DPAPI and NSS decryption for other browsers, outputs structured JSON, includes operational evasion techniques, and is presented with usage, detection opportunities, and mitigation recommendations for defenders and red-team operators.