Groupon India Subsidiary Leaks 300,000 Plain Text User Passwords

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that targets Chromium-based browsers (including Chrome, Edge, Brave) and Firefox to extract saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, history, and bookmarks. It bypasses Chrome's App-Bound Encryption by injecting a DLL into a headless Chromium process to use the IElevator COM interface, supports DPAPI and NSS decryption for other browsers, includes multiple evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), and outputs structured JSON for red team use; detection guidance and mitigations are provided.