Taiwan Kings of Spam from CipherTrust

DumpBrowserSecrets is a precompiled Windows post‑exploitation tool that harvests browser-stored credentials and session tokens from Chromium- and Firefox-based browsers by bypassing protections (App-Bound Encryption via IElevator COM when injected into a headless Chromium process, DPAPI for some browsers, and NSS handling for Firefox). It outputs structured JSON, includes evasion techniques (Early Bird APC injection, PPID/argument spoofing, API hashing, custom SQLite parser), and is presented for red-team assumed‑breach use but carries significant abuse potential for attacker-driven credential theft, lateral movement and cloud account takeover.