Infostealers Abuse Google OAuth Endpoint to ‘Revive’ Cookies, Hijack Accounts

The exploitation of an undocumented Google OAuth endpoint, MultiLogin, by various information-stealing malware strains has raised significant concerns within the cybersecurity landscape. This critical vulnerability, discovered by security researchers following a disclosure on Telegram by a threat actor known as Prisma on Oct. 20, 2023, poses a substantial risk to user sessions and account security.  Tell me more about the ... Read More

The post Infostealers Abuse Google OAuth Endpoint to ‘Revive’ Cookies, Hijack Accounts appeared first on Nuspire. …

abuse accounts actor blog cookies critical critical vulnerability cybersecurity cybersecurity landscape disclosure endpoint exploitation google hijack information infostealers malware oauth prisma researchers revive risk security security researchers stealing telegram threat threat actor undocumented vulnerability