New C4 Bomb Attack Breaks Through Chrome’s AppBound Cookie Protections

New C4 Bomb Attack Breaks Through Chrome’s AppBound Cookie Protections

Cybersecurity researchers have unveiled a new attack—dubbed the “C4 Bomb” (Chrome Cookie Cipher Cracker)—that successfully bypasses Google Chrome’s much-touted AppBound Cookie Encryption. This breakthrough exposes millions of users to renewed risks of cookie theft, credential compromise, and potential data breaches, despite Google’s recent efforts to harden Chrome against infostealer malware. AppBound Cookie Encryption In July […] The post New C…

The Chrome Cookie Cipher Cracker: How C4 Blasted a Hole in Google’s Cookie Security

In 2024, Google launched AppBound Cookie Encryption—an ambitious attempt to thwart the rising tide of infostealer malware targeting Chrome cookies. By layering in SYSTEM-level encryption and adding strict path validation, it promised to finally shut the door on low-privileged malware exfiltrating session data. But like many innovations in cybersecurity, a clever adversary—or in this case, a clever researcher—found a way back in.CyberArk Labs has…