Cupid Media Hack Exposes 42 Million Passwords In Plain Text

DumpBrowserSecrets is a publicly available post-exploitation tool designed to extract credentials and session material from major browsers on Windows, including a working bypass for Chrome's App-Bound Encryption by injecting a DLL into a headless Chromium process to call the IElevator COM interface. It supports Chromium-based browsers (Chrome, Edge, Brave) using the App-Bound (V20) model, DPAPI-based browsers (Opera, Vivaldi) and NSS-based Firefox extraction, outputs structured JSON, includes operational evasion techniques, and is presented as a red-team tool for testing credential exposure and endpoint controls.