Google: Malware abusing API is standard token theft, not an API issue

Google is downplaying reports of malware abusing an undocumented Google Chrome API to generate new authentication cookies when previously stolen ones have expired. [...]

abusing api authentication authentication cookies chrome cookies expired google google chrome issue malware reports security standard stolen theft token token theft undocumented