Google Accounts Hacked Without Passwords

Security researchers from CloudSEK have discovered a new hacking method that uses malware to give cybercriminals access to Google accounts, without needing login credentials. The malware exploits authentication cookies, thus circumventing two-factor authentication. Google has not yet provided a solution to this vulnerability. This also adds to the ongoing global debate on the effectiveness of passwords and related tools.