The First Reported Facebook Worm/Malware Pops Up

DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests browser‑stored credentials and session tokens from major browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox). It implements an App‑Bound Encryption bypass for Chromium‑based browsers by spawning a headless process, injecting a DLL via Early Bird APC to call the IElevator COM interface, and retrieving decrypted keys to locally parse and decrypt browser SQLite/JSON stores; it includes DPAPI and NSS handling for other browsers and operational evasion techniques, outputs structured JSON, and is intended for red team assumed‑breach testing but poses misuse risk.