Bitdefender Internet Security 2012 Review

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts saved credentials, session cookies, OAuth refresh tokens, credit card data and browsing history from Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox. It implements an App‑Bound Encryption bypass for Chromium browsers by spawning a headless Chromium process, injecting a DLL via Early Bird APC to use the IElevator COM interface, handles DPAPI and NSS decryption paths, includes EDR-evasion features, and outputs structured JSON for operators; the report also covers attack scenarios, detection opportunities, and mitigations.