Articles tagged "infostealer"

2 articles found

An orange watercolor session token tethered by a short chain to a small device square — a credential bound to one device, unable to travel.

session-security cookie-theft infostealer

Session cookie theft: how Chrome's DBSC protects you — and where extensions still get in

Chrome 146's Device Bound Session Credentials make stolen session cookies useless on another machine. How DBSC works and the gap extensions still exploit.

Maxim Kosterin

June 29, 2026

9 min read

extension-security supply-chain malware

GlassWorm: how to check if the IDE supply chain attack installed a Chrome infostealer

GlassWorm compromised 72+ Open VSX IDE extensions to deploy a Chrome infostealer stealing session cookies via Solana blockchain C2. Here's what to check.

Maxim Kosterin

April 13, 2026

9 min read