Android Devices Phoning Home To China

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that retrieves saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, history and bookmarks from major browsers (Chrome/Edge/Brave via App‑Bound Encryption bypass, Opera/Vivaldi via DPAPI, and Firefox via NSS). It uses headless Chromium + Early Bird APC DLL injection to decrypt app_bound_encrypted_key through the IElevator COM interface, includes multiple evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), outputs structured JSON for red-team use, and is intended to test endpoint defenses and the blast radius of compromised developer workstations.