Voting Machines Lose to Hackers Again

DumpBrowserSecrets is a publicly available post-exploitation tool that harvests browser-stored secrets (saved logins, session cookies, OAuth refresh tokens, credit card data, autofill and history) from major browsers (Chrome/Edge/Brave via App‑Bound Encryption bypass, Opera/Opera GX/Vivaldi via DPAPI, and Firefox via NSS). The report describes the two-component architecture (executable + DLL), an IElevator-based App‑Bound Encryption bypass implemented by injecting a DLL into a headless Chromium process, operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), extraction output and usage examples, plus detection opportunities and mitigation recommendations.