Python Windows Backdoor With Gmail Command & Control

DumpBrowserSecrets is a post-exploitation browser credential-harvesting tool that retrieves saved logins, cookies, OAuth refresh tokens, credit card data, autofill entries, and history from Chromium-based and Firefox browsers; it uses a DLL injected into a headless Chromium process to bypass Chrome's App-Bound Encryption via the IElevator COM interface and includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication). The report covers supported browsers, extraction output, usage examples, detection indicators (unexpected process injection, IElevator usage, reads of browser SQLite files), and mitigation recommendations such as using external credential managers and EDR heuristics that monitor headless browser instantiation and IElevator calls.