November 15, 2024 at 08:30AM The Glove Stealer malware exploits a newly revealed App-Bound encryption bypass technique to carry out attacks. This vulnerability allows the malware to evade security measures in Chrome. ### Meeting Notes Takeaways: – **Malware Identification**: The discussion focused on the Glove Stealer malware. – **Attack Method**: The malware utilizes a newly … Read more
November 14, 2024 at 04:05PM The new Glove Stealer malware can bypass Google Chrome’s App-Bound encryption to steal cookies and sensitive information from various browsers and applications. It employs social engineering tactics similar to ClickFix infections and requires local admin privileges to operate. Analysts note its basic methods indicate it remains in early development. ### … Read more
November 14, 2024 at 03:49PM New Glove Stealer malware can infiltrate Google Chrome’s App-Bound encryption, successfully stealing browser cookies. This poses significant security risks, as it can access sensitive information from users’ online activities. **Meeting Takeaways:** 1. **New Malware Alert**: A new information-stealing malware named “Glove Stealer” has been identified. 2. **Bypassing Security Features**: Glove … Read more
October 28, 2024 at 05:08PM A cybersecurity researcher, Alexander Hagenah, has released a tool that bypasses Google’s App-Bound encryption, enabling the extraction of saved credentials from Chrome. While it reflects a method similar to existing infostealer malware, its public availability increases risks for users storing sensitive data in the browser. Google is aware of the … Read more
August 1, 2024 at 05:54AM Google has introduced app-bound encryption to Chrome on Windows to enhance browser security. This new feature prevents malicious applications from accessing encrypted data, increasing the difficulty for attackers. The change applies only to cookies currently but may expand to include passwords and payment data in the future. This is part … Read more
July 31, 2024 at 12:43PM Google is bolstering Chrome’s security for Windows users by implementing app-bound encryption to protect sensitive data like session cookies from infostealer malware. This new encryption method links data to specific apps and requires system privileges, making it harder for attackers to steal user data. Google plans to expand this encryption … Read more
July 31, 2024 at 09:08AM Google announced improved cookie protections in Chrome 127 for Windows, along with a security update resolving three vulnerabilities. The most serious defect is a critical-severity issue in the open source implementation of the WebGPU standard, and two high-severity bugs were also addressed. Google is rolling out the update and advises … Read more
July 30, 2024 at 01:07PM Google Chrome on Windows introduces app-bound encryption to enhance cookie protection and defend against information-stealing malware. This encryption, explained by software engineer Will Harris, ties data to app identity, making it accessible only to the intended app. The enhanced protection will be extended to passwords, payment data, and other sensitive … Read more