Fortinet SSH Backdoor Found In Firewalls

DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests browser‑stored secrets (saved passwords, session cookies, OAuth refresh tokens, credit cards, autofill data, history, bookmarks) from Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox on Windows. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface, uses handle duplication to read locked SQLite databases, and supports DPAPI and NSS decryption paths; the tool includes evasion techniques (string obfuscation, API hashing, PPID/argument spoofing) and outputs structured JSON for red‑team use and testing of endpoint defenses.