Nasty Trojan Zeus Evades Antivirus Software

DumpBrowserSecrets is a post‑exploitation credential-harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, history, and bookmarks from major browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox). It bypasses Chrome App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface, retrieves DPAPI or NSS-protected keys for other browsers, and writes structured JSON output; the tool includes multiple evasion techniques and is intended for red team/assumed‑breach use but represents a high‑impact capability if used by adversaries.