Major Web Vulnerability Effects Yahoo, MSN, Google and More

DumpBrowserSecrets is a publicly available post‑exploitation tool for Windows that harvests saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries and browsing history from major Chromium- and Gecko-based browsers by bypassing App‑Bound Encryption (via spawning headless Chromium and using IElevator COM with Early Bird APC DLL injection), DPAPI and NSS protections; the report covers its implementation, evasion features, attack scenarios, and detection/mitigation recommendations.