Hajime Botnet Reaches 300,000 Hosts With No Malicious Functions

DumpBrowserSecrets is a Windows post-exploitation tool that harvests browser-stored credentials (saved passwords, session cookies, OAuth refresh tokens, credit cards, autofill, history) from Chromium- and Gecko-based browsers by spawning/injecting into a headless browser process to bypass App‑Bound Encryption (via the IElevator COM interface) or by extracting DPAPI/NSS keys; it is presented as a red-team-friendly credential extraction utility with multiple evasion techniques and recommendations for detection and mitigation.