UK Wants Backdoor in Next Version of Microsoft Windows

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card numbers and other browser-stored secrets from major Chromium-based browsers and Firefox by spawning a headless Chromium process and injecting a DLL to bypass App-Bound Encryption (and using DPAPI/NSS handling where applicable); the report covers how it works, supported browsers, evasion features, an attack scenario, detection opportunities and mitigation recommendations.