Barclays Rolls Out Free Anti-Virus Protection for Customers

DumpBrowserSecrets is a publicly described post‑exploitation tool that harvests browser‑stored credentials and session tokens from major browsers (Chrome/Edge/Brave via App‑Bound Encryption bypass, Opera/Vivaldi via DPAPI, and Firefox via NSS), using headless Chromium DLL injection (Early Bird APC + IElevator COM) and other evasion techniques; it outputs structured JSON and is intended for red‑team/assumed‑breach testing while demonstrating a high‑impact credential theft attack surface and recommended detection/mitigation approaches.