San Fransisco Officials Locked Out of Their Own Network

DumpBrowserSecrets is a publicly released post-exploitation tool that extracts browser-stored secrets (saved passwords, session cookies, OAuth refresh tokens, credit cards, autofill data, history and bookmarks) from major Windows browsers. It bypasses Chrome/Edge/Brave App-Bound Encryption by spawning a headless Chromium process and injecting a DLL via Early Bird APC to call the IElevator COM interface, retrieves DPAPI keys for Opera-family browsers, and uses NSS decryption for Firefox; output is written as structured JSON. The report details evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), an attack scenario demonstrating rapid credential collection for cloud account takeover, and detection/mitigation recommendations.