US Investigates Snort Sale as a Security Risk

DumpBrowserSecrets is a publicly available Windows post‑exploitation tool that harvests browser‑stored secrets (saved logins, session cookies, OAuth refresh tokens, credit cards, autofill and history) from Chrome, Edge, Brave, Opera variants, Vivaldi and Firefox. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL via Early Bird APC to use the IElevator COM interface, supports DPAPI and NSS decryption for other browsers, includes multiple operational evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), outputs structured JSON for red‑team use, and includes detection/mitigation recommendations.