Rock Phish Group Accounts for 50% of Online Scams?

DumpBrowserSecrets is a Windows post-exploitation tool that harvests credentials and session data from major browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, Firefox). It bypasses Chrome's App‑Bound Encryption by injecting a DLL into a headless Chromium process to call the IElevator COM interface, supports DPAPI and NSS decryption for other browsers, outputs structured JSON, includes multiple evasion techniques, and is intended for red team/assumed-breach testing while also representing a high-risk capability if abused.