Rumoured To Be Linked to RSA SecurID Breach

DumpBrowserSecrets is a publicly released post‑exploitation Windows tool that harvests browser‑stored secrets (saved logins, session cookies, OAuth refresh tokens, credit cards, autofill data and history) across major Chromium‑based and Firefox browsers by bypassing App‑Bound Encryption (via DLL injection into a headless Chromium process and use of the IElevator COM interface) and handling DPAPI/NSS models for others; the report documents functionality, evasion techniques, usage scenarios, detection indicators, and mitigation guidance.