ICANN Hacked Including Root DNS Systems

DumpBrowserSecrets is a publicly available post‑exploitation credential‑harvesting tool (from Maldev Academy) that targets major browsers—Chrome/Brave/Edge (App‑Bound Encryption bypass), Opera/Opera GX/Vivaldi (DPAPI), and Firefox (NSS)—to extract cookies, saved credentials, OAuth refresh tokens, credit cards, autofill data, history and bookmarks. It uses a headless Chromium + Early Bird APC DLL injection to leverage the IElevator COM interface to decrypt app_bound_encrypted_key for Chromium builds (Chrome 127+), includes evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parser), outputs structured JSON for red‑team use, and the report includes detection opportunities and mitigations for enterprise defenders.