Hiding A Bitcoin Mining Botnet In The Cloud

DumpBrowserSecrets is a Windows post-exploitation tool that harvests browser-stored secrets (cookies, saved logins, OAuth refresh tokens, credit cards, autofill and history) from Chromium-based browsers and Firefox by using DLL injection, an App-Bound Encryption (IElevator) bypass, DPAPI extraction, and NSS decryption. The tool is distributed as a compiled executable and DLL, outputs structured JSON, includes operational evasion features to hinder EDR detection, and is positioned for red-team assumed-breach exercises though it enables real-world credential theft and cloud account takeover if misused.