Hacker Develops Tool To Hide Malware in .NET Framework

DumpBrowserSecrets is a precompiled Windows post-exploitation tool that harvests browser-stored secrets (saved logins, cookies, OAuth refresh tokens, credit cards, autofill, history, bookmarks) from Chromium-based browsers and Firefox by spawning headless browser processes and using DLL injection (Early Bird APC) to leverage the IElevator COM interface to decrypt App‑Bound Encryption keys, or by retrieving DPAPI/NSS keys where applicable; the report details its capabilities, evasion techniques, typical attack scenario, detection indicators, and mitigations for red teams and defenders.