Clever Attack Allows Theft Of Names & Addresses From IE & Safari

DumpBrowserSecrets is a publicly documented post‑exploitation tool that harvests credentials and session tokens from major Windows browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox). It implements an App‑Bound Encryption bypass for Chromium-based browsers by injecting a DLL into a headless Chromium process to call the IElevator COM interface, retrieves DPAPI or NSS keys where applicable, and parses browser SQLite/JSON stores to output extracted secrets as JSON; the report covers its features, evasion techniques, usage examples, detection signals, and mitigation advice.