Next-Gen Botnets Taking The Place of Storm and Srizbi

DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests browser-stored secrets (saved logins, session cookies, OAuth refresh tokens, credit cards, autofill and history) from major Chromium-based browsers and Firefox. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface, supports DPAPI and NSS decryption for other browsers, includes operational evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, Early Bird APC injection), outputs structured JSON, and the report covers attack scenarios, detection opportunities, and mitigation recommendations.