Another MongoDB Hack Leaks Two Million Recordings Of Kids

DumpBrowserSecrets is a publicly released post‑exploitation tool that extracts saved credentials, session cookies, OAuth refresh tokens, credit card data, and browsing history from major Chromium‑based and Firefox browsers on Windows by bypassing App‑Bound Encryption (via IElevator and Early Bird APC DLL injection) or using DPAPI/NSS decryption. The report describes its architecture, supported browsers, evasion methods, typical attack scenarios (developer workstation compromise leading to cloud account takeover), detection opportunities, and mitigation recommendations for defenders.