The Glove Stealer malware, believed to be in early development stages, can bypass Google Chrome’s App-Bound encryption to steal browser cookies. Spotted by Gen Digital security researchers during a phishing campaign, the malware uses social engineering tactics to trick victims into installation. It can also steal cryptocurrency wallets, 2FA session tokens, password data and emails. To bypass encryption, the malware uses a method that requires local admin privileges on affected systems. However, uptake of this protection has not significantly reduced the numbers of information-stealing malware campaigns.
China-linked threat actors compromised multiple telecos and spied on a limited number of U.S. government officials
China-associated threat actors breached US broadband providers, accessing the private communications of specific US government officials. This large-scale cyber-espionage operation targeted telecommunications networks to steal
