VoidStealer malware steals Chrome master key via debugger trick

VoidStealer is an information-stealer offered as a MaaS that bypasses Chrome's Application-Bound Encryption by starting a suspended hidden browser process, attaching as a debugger, setting hardware breakpoints on a targeted instruction in chrome.dll/msedge.dll during startup, and reading the v20_master_key from memory to decrypt cookies and other protected browser data; researchers link the method to the open-source ElevationKatz tool and report active use in the wild.