Script Kiddies Lay Claim To NBC News Twitter Account Hack

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts cookies, saved logins, OAuth refresh tokens, credit card data, autofill, history, and bookmarks from Chrome, Edge, Brave, Opera-family browsers, Vivaldi, and Firefox. It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface (and uses DPAPI or NSS techniques for other browsers), outputs structured JSON, and includes operational evasion features aimed at surviving EDR, making it a high-risk capability for lateral movement and cloud account takeover on compromised developer endpoints.