Zero-day lets attackers access compromised Google accounts even after password changes

Jan

Who's the Boss?
Staff member
Joined
May 24, 2010
Messages
14,772
Reaction score
13,417
Location
The Rabbit Hole
Malware retains access to compromised Google accounts even after password changes

Security researchers at CloudSEK have discovered the root of a zero-day exploit in Google account security that malicious hackers are using to log back into accounts on compromised devices even after a victim changes their password.

The exploit allows attackers to steal victims’ web browser session tokens through a malicious download or link that infects a PC with malware.
 
Top
Sign up to the MyBroadband newsletter
X