Cybercrooks May Be Able To Force Mobile Phones To Send Premium-Rate SMS Messages

DumpBrowserSecrets is a Windows post‑exploitation credential harvesting tool that extracts saved logins, session cookies, OAuth refresh tokens, credit card data, autofill entries and browsing history from Chromium-based browsers (bypassing App‑Bound Encryption via injected DLL and the IElevator COM interface), DPAPI-based browsers, and Firefox (NSS). The report covers implementation details, evasion techniques, attack scenarios demonstrating rapid credential compromise for lateral movement and cloud account takeover, and detection/mitigation recommendations for enterprise environments.