Conficker (AKA Downadup or Kido) Infections Skyrocket To An Estimate 9 Million

DumpBrowserSecrets is a precompiled Windows post-exploitation tool for extracting browser-stored credentials and session material from major Chromium-based and Firefox browsers. It bypasses Chrome’s App-Bound Encryption (Chrome 127+) by spawning a headless Chromium process and injecting a DLL via Early Bird APC to use the IElevator COM interface to decrypt keys, retrieves DPAPI keys for some Chromium forks, and directly handles Firefox NSS-protected logins; the tool outputs structured JSON, includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parsing), and is presented as a red-team utility with detection and mitigation guidance.