Serious Symantec Anti-Virus Vulnerability

DumpBrowserSecrets is a publicly documented post-exploitation tool that harvests browser-stored secrets (cookies, saved credentials, OAuth refresh tokens, credit cards, autofill data, and history) from major Chromium-based browsers and Firefox; it implements an App-Bound Encryption bypass for Chrome 127+ by spawning a headless Chromium process and injecting a DLL via Early Bird APC to leverage the IElevator COM interface, uses DPAPI and NSS handling for other browsers, and includes operational evasion features, JSON output, and guidance for detection and mitigation.