Info-Stealing Malware Now Includes Google Session Hijacking

Google OAuth2 Vulnerability Being Actively Abused by Attackers, Researchers Warn
A previously undiscovered critical exploit can allow threat actors to gain persistent, unauthorized access to Google services and connected accounts even after users have changed their passwords, cybersecurity researchers warn. They said the flaw enables hackers to manipulate the OAuth 2 protocol.

access accounts attackers connected critical cybersecurity exploit flaw google hackers hijacking info info-stealing malware malware oauth oauth2 passwords persistent protocol researchers services session session hijacking stealing threat threat actors unauthorized access vulnerability