TJX Employee Fired for Trying to Fix Things

DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests saved credentials, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from major browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox). It implements an App‑Bound Encryption bypass for Chromium (via headless process spawn, Early Bird APC DLL injection, and IElevator COM decryption), supports DPAPI and NSS decryption for other browsers, includes multiple EDR‑evasion techniques, and can quickly enable cloud account takeover and lateral movement from a compromised endpoint; detection guidance and mitigations are included.