Adversaries may acquire credentials from web browsers by reading files specific to the target browser.

Tactics
TA0006

Sub-technique of
T1555


See: MITRE ATT&CK