New Malware Variants More Malicious Than ILOVEYOU Bug

DumpBrowserSecrets is a publicly published post‑exploitation tool that harvests browser‑stored credentials and tokens from Chromium‑based and Gecko browsers; it bypasses Chrome's App‑Bound Encryption by injecting a DLL into a headless Chromium process to call the IElevator COM interface, supports DPAPI and NSS decryption for other browsers, and includes operational evasion features and structured JSON output for red‑team or attacker use.