0-Day Flash Vulnerability Exploited In The Wild

DumpBrowserSecrets is a Windows post-exploitation tool that harvests browser-stored secrets (saved credentials, session cookies, OAuth refresh tokens, credit card numbers, autofill data, history, and bookmarks) from Chromium-based and Firefox browsers. It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL via Early Bird APC to call the IElevator COM interface, handles DPAPI and NSS decryption for other browsers, outputs structured JSON, and includes multiple EDR-evasion features—making it a powerful capability for lateral movement and cloud account takeover if misused.