New Zlob Trojan Alters Your Router Settings

DumpBrowserSecrets is a publicly published post-exploitation tool that harvests browser-stored secrets (saved logins, cookies, OAuth refresh tokens, credit cards, autofill data, and history) from major browsers including Chromium-based (Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox. It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface to decrypt encryption keys, handles DPAPI and NSS models for other browsers, includes evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication), outputs structured JSON, and is presented as a red-team tool for assumed-breach assessments while representing a significant abuse risk to attackers seeking lateral movement and cloud account takeover.