MySQL.com Compromised & Spreading Malware

DumpBrowserSecrets is a publicly available post‑exploitation tool that extracts browser‑stored secrets (saved passwords, session cookies, OAuth refresh tokens, credit cards, autofill entries, history, bookmarks) from major Windows browsers. It implements an App‑Bound Encryption bypass for Chromium browsers by spawning a headless Chromium process and injecting a DLL (via Early Bird APC) to call the IElevator COM interface to decrypt keys, handles DPAPI/NSS models for other browsers, includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), and provides usage examples, detection opportunities, and mitigation advice for red teams and defenders.