China Reports Millions Of Conficker Infections

DumpBrowserSecrets is a publicly available post‑exploitation tool that extracts credentials and session data from major Windows browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox) by decrypting App‑Bound Encryption or DPAPI/NSS‑protected stores. It uses a two‑component approach (an executable and injected DLL) with Early Bird APC DLL injection into a headless Chromium process to call the IElevator COM interface and retrieve encryption keys, then parses browser SQLite/JSON stores to output structured JSON containing cookies, OAuth tokens, saved logins, credit cards, autofill data, history, and bookmarks; the report details operational evasion features, detection opportunities, and mitigations.