logo
welcome
TechRadar

TechRadar

Google Chrome cookie encryption system can be easily bypassed, experts warn

TechRadar
Summary
Nutrition label

71% Informative

In July 2024 , Google released Chrome 127 , a new version of the Chrome browser came with Application-Bound (App-Bound) encryption.

The new feature was supposed to serve as a protection mechanism, encrypting cookies using a Windows service running with system privileges.

In late September , we reported that multiple infostealers were already able to work around the feature, including Lumma Stealer , StealC, and many others.

Google responded by saying it was expected, and added that it was happy the changed forced a shift in attacker behavior.