资讯

Bleeping Computer1 年

Malware abuses Google OAuth endpoint to ‘revive’ cookies, hijack ...

Multiple information-stealing malware families are abusing an undocumented Google OAuth endpoint named "MultiLogin" to restore expired authentication cookies and log into users' accounts, even if ...
Bleeping Computer1 年

Google: Malware abusing API is standard token theft, not an API issue

Google is downplaying reports of malware abusing an undocumented Google Chrome API to generate new authentication cookies when previously stolen ones have expired.