Apple’s OS X Yosemite Spotlight Privacy Issues

DumpBrowserSecrets is a publicly described post-exploitation tool that extracts browser-stored secrets (saved logins, session cookies, OAuth refresh tokens, credit cards, autofill data, history and bookmarks) from Chrome, Edge, Brave, Opera, Opera GX, Vivaldi and Firefox. It implements an App‑Bound Encryption bypass for Chromium browsers by spawning a headless Chromium process and performing Early Bird APC DLL injection to call the IElevator COM interface and retrieve decryption keys (DPAPI for some browsers, NSS for Firefox), writes structured JSON output, and includes multiple operational evasion features; the report also outlines detection opportunities and mitigation recommendations.