Firefox Confuses UK Government Piracy Laws

DumpBrowserSecrets is a Windows post‑exploitation credential‑harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit cards, autofill data and browsing history from Chrome, Edge, Brave, Opera (and variants), Vivaldi, and Firefox. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface to decrypt keys, includes DPAPI/NSS handling for other browsers, and implements multiple EDR‑evasion techniques; the report covers usage, attack scenarios, detection opportunities, and mitigations.