VMWare Rootkits, The Next Big Threat?

DumpBrowserSecrets is a Windows post-exploitation tool that harvests browser-stored credentials and session tokens from major Chromium-based browsers and Firefox by combining a compiled executable with a DLL that is injected into a headless Chromium process to bypass App-Bound Encryption (via the IElevator COM interface); it also handles DPAPI and NSS decryption for other browsers and includes multiple evasion features to reduce EDR detection, producing structured JSON output of extracted secrets for lateral movement or account takeover testing.