FrSIRT Starts Charging for OTHER Peoples Work (Exploits)

DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests browser‑stored credentials and session tokens from Chrome/Edge/Brave (via an App‑Bound Encryption bypass using DLL injection and the IElevator COM interface), Opera/Vivaldi (DPAPI), and Firefox (NSS), outputting structured JSON and incorporating multiple evasion techniques intended to reduce EDR detection; while framed for red‑team use, it represents a high‑impact credential exposure vector on compromised developer or user endpoints.