New Spyware Blackmails Users Into Purchasing Software

DumpBrowserSecrets is a publicly documented post-exploitation tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data and other browser-stored secrets from major Chromium-based and Firefox browsers on Windows. It uses a two-component design (an executable and a DLL injected into a headless Chromium process) to bypass Chrome's App-Bound Encryption via the IElevator COM interface, supports DPAPI and NSS decryption for other browsers, includes multiple operational evasion techniques, and outputs structured JSON for red-team or adversary use; the report also outlines detection opportunities and mitigation recommendations.