News and Analysis

The Glove Stealer malware, believed to be in early development stages, can bypass Google Chrome’s App-Bound encryption to steal browser cookies. Spotted by Gen Digital security researchers during a phishing campaign, the malware uses social engineering tactics to trick victims into installation. It can also steal cryptocurrency wallets, 2FA session tokens, password data and emails. To bypass encryption, the malware uses a method that requires local admin privileges on affected systems. However, uptake of this protection has not significantly reduced the numbers of information-stealing malware campaigns.