JPMorgan Hacked & Leaked Over 83 Million Customer Records

DumpBrowserSecrets is a publicly available post‑exploitation tool that extracts browser‑stored secrets (saved logins, cookies, OAuth refresh tokens, credit cards, autofill and history) from Chromium‑based browsers and Firefox. It implements an App‑Bound Encryption bypass for Chrome/Edge/Brave by spawning a headless Chromium process and injecting a DLL (Early Bird APC) to call the IElevator COM interface and decrypt the app_bound_encrypted_key, and handles DPAPI/NSS models for other browsers; output is JSON. The report details operational evasion techniques, an attack scenario demonstrating rapid credential extraction enabling SaaS/cloud account takeover, and detection/mitigation guidance for defenders.