WhatsApp Web vCard Vulnerability Exposed 200M Users

**DumpBrowserSecrets** is a public post‑exploitation tool that harvests browser‑stored credentials and session tokens from major Chromium‑based browsers and Firefox by using DLL injection into a headless Chromium process to bypass App‑Bound Encryption (via the IElevator COM interface), handling DPAPI and NSS where applicable, and exporting results as structured JSON; it includes operational evasion features and is intended for red‑team assumed‑breach scenarios but can be abused by attackers to enable account takeover and lateral movement.