Microsoft Zero Day OLE Vuln Being Exploited In Powerpoint

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that targets major browsers (Chrome, Edge, Brave, Opera, Opera GX, Vivaldi, Firefox) to extract saved passwords, cookies, OAuth refresh tokens, credit card data, autofill entries and history. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL (Early Bird APC) to use the IElevator COM interface to decrypt keys, retrieves DPAPI or NSS‑protected secrets where applicable, includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), and outputs structured JSON; the report also covers detection points and mitigations.