Phishing Fraud Cases Growing in the UK

### Executive summary DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts saved logins, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from major Chromium- and Gecko-based browsers; it bypasses App-Bound Encryption in modern Chromium builds by injecting a DLL into a headless Chromium process to access the IElevator COM interface and also handles DPAPI and NSS-decrypted stores. The report details usage, evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, Early Bird APC injection), detection opportunities, and mitigation recommendations, emphasizing the tool's relevance for red teams and its high-risk implications for cloud and SaaS account takeover from compromised developer endpoints.