China Home to at Least HALF of Malicious Web Sites

DumpBrowserSecrets is a publicly distributed post‑exploitation tool that extracts credentials and session material from major Windows browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox). It implements an App‑Bound Encryption bypass for Chromium (using a headless Chromium process, Early Bird APC DLL injection, and the IElevator COM interface) and DPAPI/NSS handling for other browsers, outputs structured JSON of recovered secrets, and includes operational evasion features; the report covers technical details, attack scenarios, detection opportunities, and mitigation advice.