Apache.org Hacked Using Remote SSH Key

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that targets Chromium- and Gecko-based browsers on Windows to extract saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, history and bookmarks. It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL (via Early Bird APC) to call the IElevator COM interface, and uses DPAPI or NSS methods for other browsers; the tool includes multiple evasion features, outputs structured JSON, and is intended for red-team/assumed-breach testing while highlighting detection and mitigation strategies.