Twitter onMouseOver XSS Exploit Causes Chaos

DumpBrowserSecrets is a publicly available post-exploitation tool for Windows that harvests browser-stored secrets (saved logins, session cookies, OAuth refresh tokens, credit cards, autofill data and history) from Chromium-based and Gecko-based browsers by using techniques including spawning headless Chromium, Early Bird APC DLL injection, and the IElevator COM interface to bypass App-Bound Encryption; it includes DPAPI and NSS handling for other browsers and contains multiple EDR-evasion features, making it a high-risk tool for credential theft and cloud account takeover if misused.