Sony Loses 25 Million More Customer Account Details Through SOE (Sony Online Entertainment)

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from major Windows browsers. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL (Early Bird APC + IElevator COM) to decrypt keys, supports DPAPI and NSS decryption for other browsers, includes operational evasion features, writes structured JSON output for red‑team use, and poses a significant risk if used by adversaries for lateral movement and cloud account takeover.