Glove Stealer Malware Exploits Chrome to Steal Data

The newly identified Glove Stealer malware is making waves in the cybersecurity world due to its ability to bypass Google Chrome’s advanced Application-Bound encryption, which was introduced to protect browser cookies. Security researchers at Gen Digital discovered this malware during an investigation into a phishing campaign that deceived users with fake error messages embedded in email attachments. This malware, while still in its early stages of development, has already demonstrated its potential to extract sensitive data from multiple sources.

Glove Stealer poses a significant threat, targeting cookies, cryptocurrency wallets, two-factor authentication (2FA) tokens, and credentials from over 280 browser extensions and 80 locally installed applications. By bypassing Chrome’s encryption defenses, the malware gains unauthorized access to stored data, exploiting a technique that leverages Chrome’s IElevator Windows service. Though the attack requires administrator privileges, the sophistication of its approach underscores the growing challenges in combating information-stealing malware.

Despite its rudimentary implementation compared to other advanced malware, Glove Stealer highlights a worrying trend: the rise of increasingly targeted phishing campaigns and sophisticated credential theft. Cybercriminals are adopting methods that combine social engineering with advanced malware deployment, bypassing even the most robust security measures. These campaigns have surged since 2023, leveraging phishing emails, zero-day exploits, and malvertising to compromise victim systems.

To counter this growing threat, security experts recommend adopting a layered defense strategy. This includes enabling multi-factor authentication (MFA), keeping software up-to-date, and limiting admin access on devices. As malware like Glove Stealer continues to evolve, organizations and individuals alike must remain vigilant to protect their sensitive data from falling into the wrong hands.

Source: BleepingComputer

The European Cyber Intelligence Foundation is a nonprofit think tank specializing in intelligence and cybersecurity, offering consultancy services to government entities. To mitigate potential threats, it is important to implement additional cybersecurity measures with the help of a trusted partner like INFRA www.infrascan.net, or you can try yourself using check.website.