Spreading Malware To Specific Tech Companies

DumpBrowserSecrets is a publicly available post-exploitation tool that harvests browser-stored credentials (saved logins, session cookies, OAuth refresh tokens, credit card data, autofill entries, history, and bookmarks) from major Chromium-based and Firefox browsers. It implements an App‑Bound Encryption bypass for Chrome/Edge/Brave by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface, and it handles DPAPI and NSS models for other browsers; the README documents usage, evasion techniques, attack scenarios, detection opportunities, and red-team use cases.