MalwareMay 6, 2026
Yet Another Way to Bypass Google Chrome's Encryption Protection
VoidStealer trojan bypasses Google Chrome's App-Bound Encryption protection.
Vendor Watch
Run Google?
Get an email when a reviewed story names Google, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch works
Summary
Researchers have discovered that the VoidStealer trojan can circumvent Google Chrome's App-Bound Encryption (ABE) mechanism, a security feature designed to protect sensitive data stored in the browser. This bypass enables infostealers to potentially access encrypted credentials and other protected information from Chrome users. The vulnerability highlights a significant gap in Chrome's defenses against sophisticated malware campaigns.
Indicators of Compromise
- malware — VoidStealer
Entities
Google (vendor)Chrome (product)VoidStealer (threat_actor)App-Bound Encryption (technology)