Security Vendor Trustwave Bought By Singtel For $810M

DumpBrowserSecrets is a publicly documented post-exploitation tool that harvests browser-stored credentials and session data from Chrome, Edge, Brave (via an App‑Bound Encryption bypass using a headless Chromium process and IElevator COM), Opera/ Vivaldi (DPAPI), and Firefox (NSS). It combines a compiled executable and an injected DLL, includes evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parser), outputs structured JSON, and is positioned for red-team use but has clear misuse potential for cloud account takeover and lateral movement.