Detecting browser data theft using Windows Event Logs

Posted by Will Harris, Chrome Security Team

Chromium's sandboxed process model defends well from malicious web content, but there are limits to how well the application can protect itself from malware already on the computer. Cookies and other credentials remain a high value target for attackers, and we are trying to tackle this ongoing threat in multiple ways, including working on web standards like
DBSC
that will help disrupt the cookie theft industry since exfiltrating these cookies will no longer …

application attackers browser can chrome chrome security chromium computer cookies credentials data data theft event event logs high logs malicious malware process protect security security team target team theft value web windows windows event logs