Malware dev says they can revive expired Google auth cookies
The Lumma information-stealer malware has launched a new feature allowing cybercriminals to restore expired Google cookies, possibly enabling account hijacking. The feature was made public on a forum and is available only to top-tier subscribers for $1,000/month. The effectiveness of this feature remains unverified. Google has yet to comment on the potential session cookie vulnerability. Experts suggest precautions such as avoiding downloads from suspect websites to prevent malware infection.