Android Phones (Possibly) Hacked At Defcon On CDMA & 4G (HSPA)

DumpBrowserSecrets is a post‑exploitation browser credential‑harvesting tool that automates extraction of saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill and history from Chromium‑based browsers and Firefox; it bypasses Chrome's App‑Bound Encryption by injecting a DLL into a headless Chromium process to call the IElevator COM interface, includes DPAPI/NSS handling for other browsers, and implements operational evasion techniques— the report details usage, supported browsers, attack scenarios, and detection/mitigation recommendations.