AVG Stepping Up Consumer Anti-Virus Offerings

DumpBrowserSecrets is a publicly released post‑exploitation tool that harvests browser-stored credentials (passwords, cookies, OAuth tokens, credit cards, autofill, history) from major Chromium-based and Gecko-based browsers. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface, supports DPAPI and NSS decryption for other browsers, includes multiple evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), outputs structured JSON, and is intended for red team assumed‑breach exercises but poses a high operational risk if abused.