Charity Computers May Fuel Malware Wars

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from Chromium-based browsers (including Chrome, Edge, Brave, Opera variants and Vivaldi) and Firefox by using techniques such as spawning a headless Chromium process, Early Bird APC DLL injection to invoke the IElevator COM interface (bypassing App-Bound Encryption), DPAPI key retrieval, and NSS decryption; the tool outputs structured JSON and includes several evasion features to reduce EDR detection, making it relevant for red teams and a practical threat to enterprise browser-stored credentials.