Infostealer malware bypasses Chrome’s new cookie-theft defenses

Multiple infostealer malware families (Lumma, Whitesnake, Vidar, Meduza, StealC, Lumar) have publicly claimed — and researchers have in some cases validated — methods to bypass Chrome's App-Bound Encryption (introduced in Chrome 127+) to extract cookies and stored credentials; some variants reportedly do so without needing administrative privileges, and researchers demonstrated cookie extraction from recent Chrome versions in sandbox tests, prompting acknowledgement from Google and highlighting a shift by attackers toward injection or memory-scraping techniques.