New Glove infostealer malware bypasses Chrome’s cookie encryption

Rasheed187 · Dec 5, 2024

More proof that Chrome is crap, since when does it support this service? But I have to admit that this new protection at least did raise the bar. But I would like to know more about this service, is this something that can be blocked from running, and I assume other Chromium browsers are not affected?

To steal credentials from Chromium web browsers, Glove Stealer bypasses Google's App-Bound encryption cookie-theft defenses, which were introduced by Chrome 127 in July.

To do that, it follows the method described by security researcher Alexander Hagenah last month, using a supporting module that uses Chrome's own COM-based IElevator Windows service (running with SYSTEM privileges) to decrypt and retrieve App-Bound encrypted keys.
Click to expand...

https://www.bleepingcomputer.com/ne...re-bypasses-google-chromes-cookie-encryption/

Log in or Sign up

New Glove infostealer malware bypasses Chrome’s cookie encryption

Rasheed187 Registered Member

Log in or Sign up

New Glove infostealer malware bypasses Chrome’s cookie encryption

Rasheed187 Registered Member

Useful Searches