News and Analysis

The Glove Stealer malware is using a new technique to bypass Chrome’s App-Bound encryption and steal data including cookies, autofill, cryptocurrency wallets, and email client information. This .NET-based info stealer targets browser extensions and locally installed software, exploiting social engineering tactics to trick users into executing malicious scripts, according to researchers from Gen Digital. The malware requires local admin rights to place modules within Chrome’s Program Files directory to bypass path validations.