Flash Zero Day Being Exploited In The Wild

DumpBrowserSecrets is a publicly documented post‑exploitation credential‑harvesting tool that extracts stored secrets from Chromium and Firefox browsers by bypassing App‑Bound Encryption (via DLL injection and the IElevator COM interface) and retrieving DPAPI/NSS keys; it outputs structured JSON and includes multiple operational evasion features, making it useful for red teams and potentially attractive to malicious actors. The report covers supported browsers, extracted data types, technical implementation, an attack scenario, detection opportunities, and mitigation guidance.