Brits Give Up Passwords For a £5 Gift Voucher

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit cards, autofill data and browsing history from Chromium-based browsers (including Chrome, Edge, Brave) and Firefox; it bypasses Chrome’s App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL via Early Bird APC to use the IElevator COM interface, uses DPAPI/NSS methods for other browsers, outputs structured JSON, and includes multiple evasion features—making it a high-risk capability for cloud account takeover and lateral movement from compromised developer endpoints.