German Police Creating Law Enforcement Trojan

DumpBrowserSecrets is a publicly available post-exploitation tool that harvests browser-stored credentials and session artifacts from major Chromium-based and Firefox browsers on Windows. It implements a sophisticated App‑Bound Encryption bypass for Chrome/Edge/Brave by spawning a headless Chromium process, injecting a DLL via Early Bird APC to call the IElevator COM interface and retrieve the decryption key; it also handles DPAPI and NSS-encrypted stores for other browsers. The tool outputs structured JSON, includes evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parser), and is positioned for red-team/assumed-breach use but represents a high-risk capability for real-world credential theft and cloud account takeover if abused.