Android Malware App Covertly Makes Purchases On China Mobile Market

DumpBrowserSecrets is a Windows post‑exploitation tool that harvests browser-stored credentials (cookies, saved logins, OAuth refresh tokens, credit cards, autofill entries, history, and bookmarks) from Chromium-based browsers (Chrome, Edge, Brave, Opera, Vivaldi) and Firefox. It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface, retrieves DPAPI/NSS keys for other browsers, and outputs structured JSON; the report covers its design, evasion features, a red-team attack scenario, detection opportunities, and mitigation recommendations.