Security News > 2024 > January > Malware Using Google MultiLogin Exploit to Maintain Access Despite Password Reset
2024-01-03 13:16
Information stealing malware are actively taking advantage of an undocumented Google OAuth endpoint named MultiLogin to hijack user sessions and allow continuous access to Google services even after a password reset. According to CloudSEK, the critical exploit facilitates session persistence and cookie generation, enabling threat actors to maintain access to a valid session in an
News URL
https://thehackernews.com/2024/01/malware-using-google-multilogin-exploit.html
Related news
- DarkGate Malware Exploits Samba File Shares in Short-Lived Campaign (source)
- Cybercriminals Exploit CrowdStrike Update Mishap to Distribute Remcos RAT Malware (source)
- SocGholish Malware Exploits BOINC Project for Covert Cyberattacks (source)
- Google Chrome adds app-bound encryption to block infostealer malware (source)
- Google ads push fake Google Authenticator site installing malware (source)
- Google Chrome Adds App-Bound Encryption to Protect Cookies from Malware (source)
- North Korean hackers exploit VPN update flaw to install malware (source)
- Cloud storage lockers from Microsoft and Google used to store and spread state-sponsored malware (source)
- Azure domains and Google abused to spread disinformation and malware (source)