tldrdailynews.com logo

"Malware Exploits Google OAuth to Hijack Accounts and Steal Information"

1 min read
Source: 9to5Google
"Malware Exploits Google OAuth to Hijack Accounts and Steal Information"
Photo: 9to5Google
TL;DR

A new malware exploits a vulnerability in Google Chrome to steal session tokens and create persistent cookies, allowing attackers to access Google Accounts even after password changes. Google has responded by securing compromised accounts and clarifying that users can invalidate stolen sessions by signing out. The company recommends users to remove any malware, turn on Enhanced Safe Browsing, and avoid installing unfamiliar software. Despite Google's countermeasures, multiple malware groups claim to have adapted to these defenses.

Topics:technologytechnology-cybersecurity##cookietheft#cyberattack#enhancedsafebrowsing#googleaccountsecurity#malware#technology-cybersecurity
Share this article
  1. New malware restores cookies to break into your Google Account [U: Google responds]  9to5Google
  2. Google password resets not enough to stop these info-stealing malware strains  The Register
  3. Malware abuses Google OAuth endpoint to ‘revive’ cookies, hijack accounts  BleepingComputer
  4. Attackers Abuse Google OAuth Endpoint to Hijack User Sessions - Attackers Abuse Google OAuth Endpoint to Hijack User Sessions  DARKReading
  5. Malware exploits undocumented Google OAuth endpoint to regenerate Google cookies  Security Affairs

Want the full story? Read the original reporting

Read on 9to5Google