Google Chrome adds app-bound encryption to block infostealer malware

Google Chrome adds app-bound encryption to block infostealer malware

July 30, 2024 at 01:07PM

Google Chrome on Windows introduces app-bound encryption to enhance cookie protection and defend against information-stealing malware. This encryption, explained by software engineer Will Harris, ties data to app identity, making it accessible only to the intended app. The enhanced protection will be extended to passwords, payment data, and other sensitive information.

Got it! Based on the meeting notes, it seems that Google Chrome is enhancing its cookie protection on Windows systems through the introduction of App-Bound Encryption. This upgraded protection aims to safeguard sensitive data from infostealer malware attacks by encrypting data tied to app identity. The use of privileged services and system privileges will make it more challenging for attackers to steal data. In addition, the improved protection will extend to passwords, payment data, and persistent authentication tokens. This initiative is part of Google’s broader efforts to enhance user data security, which includes features such as Safe Browsing download protection, Device Bound Session Credentials, and account-based threat detection. The team also emphasized the importance of collaborating with the security community to improve detections and strengthen operating system protections against evolving malware threats.

Full Article