Cyber Crime Toolkits Go On Sale

DumpBrowserSecrets is a Windows post-exploitation credential-harvesting tool (aimed at red teams) that extracts passwords, cookies, OAuth tokens, credit cards and browsing data from major browsers by spawning a headless Chromium process, injecting a DLL to bypass App-Bound Encryption via the IElevator COM interface, and parsing/decrypting on-disk browser stores; it includes DPAPI/NSS handling for other browsers and multiple operational evasion features, plus guidance on detection and mitigation.