Smart Trojan Targets eBay Users

DumpBrowserSecrets is a Windows post‑exploitation credential‑harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries and browsing history from Chromium‑based (Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox browsers; it bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface, uses DPAPI/NSS for other browsers, includes multiple evasion features, and outputs structured JSON for red‑team or adversary use — detection focuses on unusual headless browser processes, non‑browser reads of browser SQLite files, and IElevator COM calls.