Amnesty International Irrepresible Internet Campaign

DumpBrowserSecrets is a Windows post-exploitation tool that harvests browser-stored credentials and session tokens from major browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, Firefox). It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface, handles DPAPI and NSS decryption for other browsers, includes multiple evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, custom SQLite parser), and outputs structured JSON suitable for replaying sessions or validating credentials; the report also outlines detection opportunities and mitigation recommendations.