Dshocker AKA Aush0k Hacker Pleads Guilty to Computer Felonies

DumpBrowserSecrets is a public, precompiled Windows post-exploitation tool from Maldev Academy that harvests browser-stored credentials (saved passwords, session cookies, OAuth refresh tokens, credit cards, autofill data, history, and bookmarks) across Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox. It implements an App-Bound Encryption bypass for Chromium-based browsers by spawning a headless Chromium process, injecting a DLL via Early Bird APC to use the IElevator COM interface to decrypt app-bound keys, and includes evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parser); outputs structured JSON and is intended for red team/assumed-breach testing but has clear abuse potential for lateral movement and cloud account takeover.