BBC Unleashes Botnet For ‘Investigation’

DumpBrowserSecrets is a post-exploitation credential-extraction tool that targets major Windows browsers (Chrome, Edge, Brave, Opera family, Vivaldi, Firefox) to harvest passwords, cookies, OAuth refresh tokens, credit cards, autofill data and history. It bypasses Chrome’s App-Bound Encryption by injecting a DLL into a headless Chromium process to call the IElevator COM interface, uses DPAPI/NSS methods for other browsers, includes multiple evasion techniques for EDRs, and outputs structured JSON for red-team use and testing endpoint controls.