Mac OS X Ransomware KeRanger Is Linux Encoder Trojan

DumpBrowserSecrets is a post‑exploitation credential-harvesting tool (publicly distributed) that extracts passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, history, and bookmarks from major Chromium-based and Firefox browsers on Windows. It implements an App‑Bound Encryption bypass for Chrome/Edge/Brave by injecting a DLL into a headless Chromium process to call the IElevator COM interface, uses DPAPI/NSS handling for other browsers, includes multiple evasion techniques, and outputs structured JSON for red‑team or adversary use; the report covers usage, attack scenarios, detection opportunities, and mitigations.