Recent Down-time at Darknet

DumpBrowserSecrets is a precompiled Windows post-exploitation tool (with an optional injected DLL) that harvests browser-stored credentials and session tokens from major Chromium- and Gecko-based browsers by bypassing App-Bound Encryption using a headless browser + DLL injection and the IElevator COM interface; it outputs structured JSON and includes operational evasion features. The report documents supported browsers and data types, usage and attack scenarios, detection signals (process injection, IElevator calls, SQLite reads), and mitigation recommendations such as using native credential managers and EDRs that monitor the IElevator interface and headless browser instantiation.