Google Chrome Adds New Defenses Against Infostealer Malware

Google has announced new built-in protections for the Chrome browser aimed at stopping “infostealer” malware from harvesting saved passwords and session cookies.

These enhancements tie session cookies to the specific device or operating system instance, making it significantly harder for attackers to steal the cookies and replay them on their own machines to bypass multi-factor authentication (MFA).

How to check if you’re affected

All Chrome users can benefit from these protections by ensuring their browser is up to date, as affected versions prior to the rollout do not include these bindings:

1. Open Chrome and click the three-dot menu in the top right.
2. Go to Help > About Google Chrome.
3. Chrome will automatically check for updates and install them. Relaunch the browser if prompted.

Sources

• BleepingComputer: Google Chrome adds infostealer protection against cookie theft