Chinese Company Shares Huge Malware Database

DumpBrowserSecrets is a publicly documented post‑exploitation tool that harvests browser‑stored credentials and session tokens from Chromium‑based and Firefox browsers. It bypasses Chrome’s App‑Bound Encryption by injecting a DLL into a headless Chromium process to use the IElevator COM interface, handles DPAPI and NSS models for other browsers, and includes evasion features (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication, and a custom SQLite parser). The report covers capabilities, usage examples, an attack scenario demonstrating rapid credential extraction for lateral movement or cloud account takeover, and detection/mitigation guidance for defenders.