South Korean Webhost Nayana Pays USD1 Million Ransom

DumpBrowserSecrets is a publicly documented post-exploitation tool that harvests browser-stored credentials (cookies, saved logins, OAuth refresh tokens, credit cards, autofill, history) from Chrome/Edge/Brave (via App-Bound Encryption bypass using a headless Chromium process and IElevator COM), Opera/Vivaldi (DPAPI), and Firefox (NSS). The report details its injection and decryption techniques, operational evasion features, typical attack scenarios (developer workstation compromise and SaaS session takeover), detection vectors, and mitigation advice for enterprise defenders.