Java Based Cross Platform Malware Trojan (Mac/Linux/Windows)

DumpBrowserSecrets is a Windows post-exploitation credential-harvesting tool that extracts saved passwords, cookies, OAuth tokens, credit card data, and browsing history from Chromium- and Gecko-based browsers. It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface, uses DPAPI or NSS decryption for other browsers, includes runtime evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, Early Bird APC injection), and outputs structured JSON for red-team or adversary use; detection opportunities and mitigations are also discussed.