UAE Telco Etisalat Installs Spyware On Users Blackberries

DumpBrowserSecrets is a publicly available post-exploitation tool that harvests browser-stored credentials and session tokens from major Windows browsers (Chrome, Edge, Brave, Opera family, Vivaldi, Firefox). It bypasses Chrome's App-Bound Encryption by injecting a DLL into a headless Chromium process and using the IElevator COM interface to decrypt keys, supports DPAPI and NSS decryption for other browsers, includes operational evasion techniques, and outputs extracted secrets as structured JSON—enabling rapid lateral movement and cloud account takeover from compromised developer endpoints.