Hackers Break Into Water Processing Plant Network

DumpBrowserSecrets is a publicly available post-exploitation tool that harvests saved credentials, session cookies, OAuth refresh tokens, credit card data, and other browser-stored secrets from Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox on Windows. It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface, supports DPAPI and NSS decryption, includes evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parsing), and is positioned as a red-team utility for assessing credential exposure and EDR detection efficacy.