US Health Insurance Provider Leaks 70 Million Records

DumpBrowserSecrets is a Windows post-exploitation credential-harvesting tool for red teams that extracts saved credentials, cookies, OAuth tokens, credit card details, autofill data and history from Chromium-based browsers (Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox. It implements an App-Bound Encryption bypass for Chrome 127+ by spawning a headless Chromium process and injecting a DLL via Early Bird APC to use the IElevator COM interface, handles DPAPI and NSS decryption where applicable, includes multiple evasion techniques, writes structured JSON output, and provides detection and mitigation guidance.