Client Emails, Usernames & Passwords Leaked

DumpBrowserSecrets is a precompiled Windows post-exploitation tool that extracts browser-stored credentials (saved passwords, session cookies, OAuth refresh tokens, credit card numbers, autofill data, history, and bookmarks) from Chromium-based browsers (Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox. The tool bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL via Early Bird APC to use the IElevator COM interface, handles DPAPI and NSS decryption for other browsers, and includes multiple evasion features; the report covers usage, attack scenarios, detection opportunities, and mitigations.