Google Chrome gets ‘Device Bound Session Credentials’ to stop cookie theft

Google has announced the introduction of Device Bound Session Credentials (DBSC) to secure Chrome users against cookie theft.

In January we reported how hackers found a way to gain unauthorized access to Google accounts, bypassing multi-factor authentication (MFA), by stealing authentication cookies with info-stealer malware. An authentication cookie is added to a web browser after a user proves who they are by logging in. It tells a website that a user has already logged in, so they aren’t …

access accounts authentication authentication cookies bypassing chrome cookie cookies cookie theft credentials dbsc device device bound session credentials factor found google google accounts google chrome hackers info introduction january malware mfa multi-factor multi-factor authentication session stealer stealing theft unauthorized unauthorized access