Stealing ATM Pin Numbers Using Thermal Imaging Cameras

DumpBrowserSecrets is a post‑exploitation credential harvesting tool for Windows that extracts passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, history, and bookmarks from major Chromium-based and Firefox browsers. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL (Early Bird APC) to call the IElevator COM interface, retrieves DPAPI or NSS secrets where applicable, includes operational evasion features, and outputs structured JSON for red-team or adversary use; the report also covers detection opportunities and mitigations.