German Federal Trojan (0zapftis/Bundestrojaner) Eavesdrops On Skype, IE, Firefox, MSN Messenger & More

DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests browser‑stored secrets (saved passwords, session cookies, OAuth refresh tokens, credit cards, autofill data, and history) from major Chromium‑based and Firefox browsers on Windows. It bypasses App‑Bound Encryption in modern Chromium builds by injecting a DLL into a headless browser process to use the IElevator COM interface, handles DPAPI and NSS encrypted stores, includes multiple EDR‑evasion techniques, and outputs structured JSON for rapid credential reuse—making it highly relevant for red teams and malicious actors seeking cloud and SaaS account takeover.