Google Chrome adds infostealer protection against session cookie theft

Summary

Google Chrome 146 for Windows now includes Device Bound Session Credentials (DBSC) protection. This new feature aims to prevent infostealer malware from stealing session cookies, which are crucial for maintaining user authentication on websites.

IFF Assessment

FRIEND

This is good news for defenders as a major browser is implementing a new security feature to combat a common type of malware attack.

Defender Context

This development highlights the ongoing arms race between malware developers and browser vendors. Defenders should be aware of the increasing sophistication of infostealer attacks and the proactive measures being taken by major platforms to mitigate them. Staying updated on browser security features and user education regarding cookie security remains important.

Read Full Story →