Wordpress Download Server Compromised (2.1.1)

DumpBrowserSecrets is a publicly released post-exploitation credential-harvesting tool designed to extract saved credentials, session cookies, OAuth tokens, credit card data, autofill entries, and browsing history from major browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox). It bypasses Chrome's App-Bound Encryption by injecting a DLL into a spawned headless Chromium process (Early Bird APC + IElevator COM), handles DPAPI and NSS cases appropriately, includes multiple operational evasion features, outputs structured JSON, and is positioned as a red-team tool to demonstrate SaaS and browser-based credential risk on compromised Windows hosts.