IBM Accused of Hacking

DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests credentials and session tokens from major Windows browsers (Chromium variants and Firefox). It bypasses Chrome's App‑Bound Encryption by injecting a DLL into a headless Chromium process and using the IElevator COM interface to decrypt keys, extracts cookies, saved logins, OAuth tokens, credit card data and more, and includes evasion features to reduce EDR detection; the report covers usage, attack scenarios, detection opportunities, and mitigation recommendations.