Perl.com Sends Visitors to P*rn Site!

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries and browsing history from major Chromium‑based and Firefox browsers on Windows; it implements an App‑Bound Encryption bypass for Chrome/Edge/Brave by injecting a DLL into a headless Chromium process to call the IElevator COM interface, includes DPAPI and NSS handling for other browsers, and incorporates operational evasion techniques—this report details capabilities, attack scenarios, detection opportunities, and mitigations.