Back Cybersecuritynews

New VoidStealer Variant Bypasses Chrome ABE Without Injection or Privilege Escalation

Cybersecuritynews •Tushar Subhra Dutta • March 20, 2026

A newly identified variant of the VoidStealer infostealer has drawn serious attention from the security community after it became the first malware known to bypass Google Chrome’s Application-Bound Encryption (ABE) without requiring code injection or elevated system privileges. The variant, introduced in VoidStealer version 2.0 on March 13, 2026, uses a debugger-based technique to silently […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

VoidStealer Malware Bypasses Chrome ABE to Steal Sensitive Data VoidStealer, a new infostealer malware, has been identified as the first to bypass Google Chrome's Application-Bound Encryption (ABE) using a novel debugger-based technique. This method allows it to extract the v20_master_key, which is crucial for decrypting sensitive browser data like passwords and cookies, directly from memory without requiring privilege escalation or code injection. The malware, which operates as a malware-as-a-service (MaaS) platform, was first observed in the wild in December 2025 and has rapidly evolved, with version 2.0 introducing this stealthy bypass method. Researchers from Gen Digital noted that while ABE was designed to protect sensitive data, the key still exists in plaintext during decryption operations, which VoidStealer exploits. The malware's technique involves attaching a debugger to a hidden browser process and setting hardware breakpoints to intercept the master key during its brief presence in memory. This development poses a significant risk to users of Chrome and other browsers utilizing ABE, as it represents a shift in the tactics employed by infostealers. 5 sources 65

Extracted Entities

New VoidStealer Variant Bypasses Chrome ABE Without Injection or Privilege Escalation

The full story

Extracted Entities

Attack Types (1)

Malware (1)

Tools (1)