Facebook E-mail Spam Conceals Malware Attack

DumpBrowserSecrets is a publicly distributed post‑exploitation tool that harvests browser‑stored credentials and session artifacts from major Chromium and Gecko browsers. It includes an App‑Bound Encryption bypass for modern Chromium builds (using DLL injection and the IElevator COM interface), DPAPI and NSS decryption for other browsers, structured JSON output, and multiple evasion techniques — enabling rapid credential and session token extraction useful for lateral movement and cloud account takeover.