Nvidia Investigates Claims Of Online Store Compromise During Spate Of Hacking

DumpBrowserSecrets is a publicly available post-exploitation tool that harvests browser-stored credentials (passwords, session cookies, OAuth refresh tokens, credit card data, autofill, history, bookmarks) from Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox. It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface, includes DPAPI and NSS handling for other browsers, and implements multiple evasion techniques aimed at EDRs; output is structured JSON intended for red team use and testing detection controls.