UK Government To Launch ‘Hack Idol’

DumpBrowserSecrets is a Windows post-exploitation tool that harvests saved credentials, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from major Chromium- and Gecko-based browsers. It bypasses Chrome's App-Bound Encryption by injecting a DLL into a headless Chromium process (using Early Bird APC injection and the IElevator COM interface) to decrypt keys, includes DPAPI and NSS handling for other browsers, and implements operational evasion features; the report covers usage, attack scenarios, detection opportunities, and mitigation recommendations.