Multilingual Worm Spreads Over MSN Messenger

DumpBrowserSecrets is a Windows post‑exploitation tool that harvests browser-stored secrets (saved passwords, session cookies, OAuth refresh tokens, credit cards, autofill, history, bookmarks) from major Chromium-based and Firefox browsers. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL (via Early Bird APC) to use the IElevator COM interface to decrypt the app_bound_encrypted_key, retrieves DPAPI keys for some browsers, and uses NSS decryption for Firefox; it includes evasion capabilities (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parser) and outputs structured JSON for red‑team or offensive use, with accompanying detection and mitigation guidance.