Dark Web Paying Corporate Workers To Leak Info

DumpBrowserSecrets is a post-exploitation credential-harvesting tool (open-source/red-team oriented) that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from Chromium-based and Firefox browsers on Windows. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL via Early Bird APC to call the IElevator COM interface, and handles DPAPI and NSS encryption for other browsers; the tool includes multiple evasion features and outputs structured JSON for operators.