Malware Numbers Still Increasing Rapidly

DumpBrowserSecrets is a publicly available post-exploitation tool that harvests browser-stored secrets (saved credentials, session cookies, OAuth refresh tokens, credit cards, autofill and history) from major Windows browsers; it implements an App-Bound Encryption bypass for Chromium-based browsers by spawning a headless Chromium process, injecting a DLL via Early Bird APC, and using the IElevator COM interface to decrypt keys, while using DPAPI and NSS techniques for other browsers. The report covers implementation details, evasion features, example attack scenarios, detection opportunities (process injection, headless browser instantiation, IElevator calls, non-browser reads of browser SQLite DBs) and mitigations such as using dedicated credential managers and EDR controls.