Signal Messaging App Formal Audit Results Are Good

DumpBrowserSecrets is a Windows post‑exploitation tool that harvests credentials and session data from major Chromium‑based browsers and Firefox by bypassing App‑Bound Encryption (via IElevator COM interaction after Early Bird APC DLL injection) or using DPAPI/NSS decryption where applicable. It outputs structured JSON of cookies, saved logins, OAuth refresh tokens, credit cards and autofill data, includes operational evasion features to reduce EDR detection, and is intended for red team/assumed‑breach use but is publicly available and thus poses a notable risk for cloud account takeover and lateral movement.