US Investigators Pinpoint Author Of Google Attack Code

DumpBrowserSecrets is a publicly available post-exploitation tool that harvests credentials and session tokens from major browsers (Chrome, Edge, Brave, Opera family, Vivaldi, Firefox). It implements an App-Bound Encryption bypass for Chromium-based browsers by injecting a DLL into a headless browser process to call the IElevator COM interface, supports DPAPI and NSS decryption methods for other browsers, includes operational evasion tricks (string obfuscation, API hashing, PPID/argument spoofing, Early Bird APC injection), and outputs structured JSON useful for red team or malicious reuse; the report also describes detection points and mitigations.