Complex Cyberwar Tool ‘Flamer’ Found Infecting Computers In Iran & Israel

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that targets Chromium-based and Firefox browsers to extract cookies, saved credentials, OAuth refresh tokens, credit card data, autofill entries, and browsing history. It bypasses Chrome's App-Bound Encryption (via IElevator COM and DLL injection into a headless Chromium process) and DPAPI/NSS protections, includes evasion features (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication), outputs structured JSON, and is presented for red-team use but represents a high-risk capability for real-world abuse enabling rapid lateral movement and cloud account takeover.