Google OAuth endpoint exploited by various malware

BleepingComputer reports that expired authentication cookies are being revived for account access by numerous information-stealing malware strains by leveraging the newly discovered MultiLogin Google OAuth endpoint.

access account account access authentication authentication cookies bleepingcomputer cookies endpoint expired exploited google identity information malware oauth reports stealing threat intelligence