New MySpace and Facebook Worm Target Social Networks

DumpBrowserSecrets is a post-exploitation credential-harvesting tool (released by Maldev Academy) that extracts saved credentials, cookies, OAuth refresh tokens, credit card data, autofill entries and browsing history from major Windows browsers. It implements an App-Bound Encryption bypass for Chromium-based browsers by spawning a headless Chromium process and injecting a DLL via Early Bird APC to call the IElevator COM interface, supports DPAPI/NSS decryption for other browsers, includes multiple evasion features, outputs structured JSON, and is intended for red-team assumed-breach testing but poses a high-risk capability if used by malicious actors.