Infostealer malware swiped session cookies from millions of devices last year alone. Chrome's new Device Bound Session Credentials (DBSC) ties them to hardware, rendering theft pointless.
Stolen session cookies fueled 86% of infostealer attacks in 2023. Google's new Chrome feature slams the door on that — cryptographically tethering them to your device.
Picture this: malware snags your session cookie, but it's worthless without your machine's secret key. Google's new Chrome trick — Device Bound Session Credentials — just made infostealer dreams die hard.
Banks thought two-factor was ironclad. Crooks just rented virtual phones to laugh it off. Welcome to security's latest clown show.