Google’s AppBound Cookie Encryption was introduced in July 2024 to enhance cookie security in Chrome, requiring malware to operate with elevated privileges for cookie theft. However, research revealed vulnerabilities that allow low-privileged malware to exploit the system, including COM hijacking and the development of a tool called C4 (Chrome Cookie Cipher Cracker) to bypass these protections. The findings emphasize the ongoing battle between security advancements and malware adaptation.