VoidStealer Debuts Novel Debugger Bypass for Chrome and Edge Encryption

Researchers at Gen Threat Labs uncovered VoidStealer, the first in-the-wild infostealer that bypasses browser Application-Bound Encryption by acting as a debugger and setting hardware breakpoints to capture the v20_master_key from Chrome/Edge memory. The technique requires no code injection or privilege escalation, makes detection harder, and leaves behavioral fingerprints (unauthorized debugger reads); researchers recommend monitoring for unauthorized debugging of browsers and other behavioral detection to mitigate risk.