Malicious PDF Files To Exploit iPhone & iPad Zero Day In The Wild

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from Chromium-based browsers (including Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface to decrypt the app_bound_encrypted_key, retrieves DPAPI or NSS-protected secrets as appropriate, and outputs structured JSON; the tool includes multiple evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication) and is positioned for red-team/assumed-breach testing but represents a significant credential-theft capability if abused.