Google Chrome cookie encryption system can be easily bypassed, experts warn

The cookie encryption system that Google introduced to the Chrome browser a few months ago can easily be bypassed, experts have warned.

In fact, a security researcher has recently published a new tool that does just that.

In July 2024, Google released Chrome 127, a new version of the Chrome browser that came with Application-Bound (App-Bound) encryption. The new feature was supposed to serve as a protection mechanism, encrypting cookies using a Windows service running with SYSTEM privileges. The tool was supposed to prevent infostealing malware from grabbing sensitive information stored in the browser, such as login credentials, session cookies, and more.

Higher privileges needded

“Because the App-Bound service is running with system privileges, attackers need to do more than just coax a user into running a malicious app,” Google said at the time. “Now, the malware has to gain system privileges, or inject code into Chrome, something that legitimate software shouldn’t be doing.”

But the success of the new feature was short-lived. In late September, we reported that multiple infostealers were already able to work around the feature, including Lumma Stealer, StealC, and many others.

Google responded by saying that it was expected, and added that it was happy the changed forced a shift in attacker behavior.

“This matches the new behavior we have seen. We continue to work with OS and AV vendors to try and more reliably detect these new types of attacks, as well as continuing to iterate on hardening defenses to improve protection against infostealers for our users.”

Now, security researcher Alexander Hagenah built and shared a tool on GitHub he called ‘Chrome-App-Bound-Encryption-Decryption’ which does the same as these infostealers, BleepingComputer reports.

“This tool decrypts App-Bound encrypted keys stored in Chrome’s Local State file, using Chrome’s internal COM-based IElevator service,” the project page reads. “The tool provides a way to retrieve and decrypt these keys, which Chrome protects via App-Bound Encryption (ABE) to prevent unauthorized access to secure data like cookies (and potentially passwords and payment information in the future).”

Commenting on all of the above, Google essentially said it was satisfied, since crooks now need higher privileges to pull off the attacks:

“This code [xaitax’s] requires admin privileges, which shows that we’ve successfully elevated the amount of access required to successfully pull off this type of attack,” Google said.

Via BleepingComputer

More from TechRadar Pro

https://cdn.mos.cms.futurecdn.net/rJVTocga2gNpgdJnVGqpk9-1200-80.jpg

Source link

HP’s EOFY 2025 sale is stacked with serious discounts on everything from ultra-light laptops to RTX gaming rigs

I just experienced super-smooth Cyberpunk 2077 at Ultra settings on a Mac, but the developers say there’s more to ‘squeeze out’ of Apple Silicon

This AI email marketing tool from Hostinger might change how small businesses send newsletters forever

Surface Laptop 13-inch vs MacBook Air 13-inch

Ex-Israeli Intelligence Official: Shockwaves of Trump’s “Take Over Gaza” Heard, Felt Across Region

What UK political parties are promising in the 2019 general election

Otto Warmbier’s parents want North Korea to suffer for their son’s death

Could a ‘youthquake’ cause Boris Johnson to lose the general election?

Which Celebrity Styles Americans Copy Most in 2025: New Study

New ‘Westworld’ trailer introduces us to another dystopian tech company

What’s the point of ‘Charlie’s Angels’ without Sam Rockwell dancing?

These striking photos capture the future of human flight

Enterprise Products Partners' SWOT analysis: midstream giant's stock resilience tested

JetBlue's SWOT analysis: airline stock faces turbulence amid strategic shifts

Minnesota lawmaker killed on Saturday served with compassion, governor says

Minnesota shooting suspect told friend in text message: I might be dead soon

The YouTuber who has become one of Gen Z’s most beloved celebrities

26 last-minute holiday gifts that are still thoughtful and unique

Practicing gratitude regularly can make you less stressed and sleep better

8 things millennials wish you would just stop getting them for the holidays

Google Chrome cookie encryption system can be easily bypassed, experts warn

HP’s EOFY 2025 sale is stacked with serious discounts on everything from ultra-light laptops to RTX gaming rigs

I just experienced super-smooth Cyberpunk 2077 at Ultra settings on a Mac, but the developers say there’s more to ‘squeeze out’ of Apple Silicon

This AI email marketing tool from Hostinger might change how small businesses send newsletters forever

Surface Laptop 13-inch vs MacBook Air 13-inch