FTC Cracks Down On Spyware Seller CyberSpy Software

DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests browser-stored credentials and session tokens from Chrome, Edge, Brave, Opera family, Vivaldi, and Firefox. It implements a DLL-injection-based IElevator COM bypass to decrypt Chrome's App‑Bound Encryption keys, uses DPAPI and NSS handling for other browsers, includes several operational evasion techniques, outputs structured JSON, and is presented as a red-team focused capability for demonstrating credential exposure and potential cloud account takeover.