US Subway Stores POS Hacked For $3Million Dollars

DumpBrowserSecrets is a publicly available post-exploitation tool that harvests credentials and session tokens from Chromium- and Gecko-based browsers on Windows by bypassing App-Bound Encryption (via IElevator COM and DLL injection) and extracting DPAPI/NSS-protected secrets; it outputs structured JSON and includes multiple evasion techniques, making it a high-impact capability for lateral movement and cloud account takeover in compromised endpoints.