Sony Digital Certs Being Used To Sign Malware

DumpBrowserSecrets is a publicly available post-exploitation tool designed to harvest browser-stored credentials and session tokens across major Chromium-based browsers and Firefox. It uses Early Bird APC DLL injection into a headless Chromium process to invoke the IElevator COM interface and decrypt App-Bound Encryption keys (Chrome/Brave/Edge), retrieves DPAPI keys for Opera-family browsers, and uses NSS decryption for Firefox, producing structured JSON output of cookies, saved logins, OAuth tokens, credit cards, autofill data, and history; the report highlights evasion features, detection opportunities, and red-team use-cases.