Chrome Browser Alert! This Cookie Malware Can Access Your Google Accounts Even If You Reset Password, Log Out; Details

siteadmin December 30, 2023

Cybercriminals are using a new type of malware named ‘MultiLogin’, which abuses Google’s OAuth endpoint to sign back into user accounts by reviving expired cookies, according to a report by BleepingComputer. The malware reportedly pilfered tokens and account data from Google accounts, including saved passwords to ensure ongoing access to these accounts. Google has yet to acknowledge or suggest mitigation measures for this threat.