China Facing Problems With Android Handsets & Pre-installed Trojans

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts browser-stored secrets (passwords, cookies, OAuth tokens, credit cards, autofill data, history and bookmarks) from major Chromium-based browsers and Firefox. It includes an App‑Bound Encryption bypass for Chrome 127+ by spawning a headless Chromium process and injecting a DLL via Early Bird APC to call the IElevator COM interface, supports DPAPI and NSS decryption for other browsers, outputs structured JSON, and incorporates evasion features intended to resist EDR detection—making it useful for red teams and attractive to malicious actors seeking cloud account takeover and lateral movement.