Sunbelt Software Bought By GFI For An Undisclosed Sum

DumpBrowserSecrets is a post-exploitation credential-harvesting tool (successor to DumpChromeSecrets) that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, history, and bookmarks from major Chromium-based browsers and Firefox on Windows. It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface, supports DPAPI and NSS decryption for other browsers, includes multiple operational evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication), outputs structured JSON, and is positioned as a red-team tool for assessing the credential blast radius of compromised developer endpoints.