4 Former LulzSec Members Sentenced To Prison Time In The UK

DumpBrowserSecrets is a publicly available post-exploitation credential-harvesting tool that targets major browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox) to extract saved passwords, cookies, OAuth tokens, credit cards, autofill data and browsing history. It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL via Early Bird APC to call the IElevator COM interface, supports DPAPI and NSS decryption models for other browsers, includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parsing), outputs structured JSON, and is positioned as a red-team tool useful for demonstrating credential exposure and testing endpoint controls.