Security Vendor Trustwave Named In Target Suit

DumpBrowserSecrets is a publicly documented post‑exploitation tool that harvests browser-stored secrets (saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill and history) from Chrome, Edge, Brave, Opera-family browsers and Firefox. It implements an App‑Bound Encryption bypass for Chromium-based browsers by spawning a headless Chromium process, injecting a DLL via Early Bird APC to call the IElevator COM interface and retrieve decryption keys, and uses DPAPI/NSS handling for other browsers; the report also describes operational evasion techniques and detection/mitigation opportunities for defenders.