Linux.Darlloz Worm Targets x86 Linux PCs & Embedded Devices

DumpBrowserSecrets is a publicly released post‑exploitation tool for Windows that harvests browser-stored credentials and session tokens from major Chromium- and Gecko-based browsers. It implements an App‑Bound Encryption bypass for Chrome/Edge/Brave by spawning a headless Chromium process and injecting a DLL via Early Bird APC to call the IElevator COM interface, retrieves DPAPI and NSS secrets for other browsers, and outputs structured JSON; the tool includes multiple evasion techniques and is positioned for red-team use but poses realistic risk if used by adversaries.