Linux Backdoor Fokirtor Injects Traffic Into SSH Protocol

DumpBrowserSecrets is a post‑exploitation credential extraction tool that targets Chromium‑based and Firefox browsers on Windows to recover saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and history. It bypasses Chrome App‑Bound Encryption (via spawning a headless Chromium process and DLL injection using Early Bird APC to call the IElevator COM interface), handles DPAPI for other Chromium forks, and uses NSS decryption for Firefox; the tool includes evasion measures (string obfuscation, API hashing, PPID/argument spoofing, handle duplication) and outputs structured JSON for red‑team or offensive use, enabling rapid account takeover and lateral movement in assumed‑breach scenarios.