Twitter Targeted by Malware Distributors

DumpBrowserSecrets is a post-exploitation browser credential-harvesting tool that extracts passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, history and bookmarks from major Chromium-based browsers (Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox. It bypasses Chrome's App‑Bound Encryption by injecting a DLL into a headless Chromium process to call the IElevator COM interface and retrieve the encryption key, handles DPAPI/NSS models for other browsers, and includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication and a custom SQLite parser), producing structured JSON output useful for lateral movement and cloud account takeover testing.