UK to Become Even More Draconian with Privacy Laws

DumpBrowserSecrets is a publicly available post-exploitation tool that extracts saved credentials, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from major Windows browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox). It implements an App-Bound Encryption bypass for Chromium (injecting a DLL into a headless Chromium process to use the IElevator COM interface), handles DPAPI and NSS decryption for other browsers, and includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication, and a custom SQLite parser). The tool is presented as a red-team utility but represents a significant credential-exfiltration capability that can enable lateral movement, SaaS account takeover, and persistent access if used by attackers.