Malware abuses Google OAuth endpoint to ‘revive’ cookies, hijack accounts

December 29, 2023

Multiple information-stealing malware families are abusing an undocumented Google OAuth endpoint named "MultiLogin" to restore expired authentication cookies and log into users' accounts, even if an account's password was reset.

Link to News

Similar Press

View all

How to provide team insight

Small article and blog description can be added here

Get started

Improve team performance

Small article and blog description can be added here

Get started

How to gain team satisfaction

Small article and blog description can be added here

Get started

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur.