Security experts at CloudSEK have discovered a new malware that exploits third-party cookies to gain unauthorized access to Google accounts without needing passwords.
This security breach, announced by a hacker in October 2023, targets Google authentication cookies, allowing hackers to bypass password-based security and two-factor authentication.
The exploit poses a significant risk to all Google accounts, as it enables ongoing access to Google services even after a password change. (Trending: GOP Rep. Mace Clashes Directly With Hunter Biden At Hearing)
Google has responded by upgrading its defenses and advising users to remove malware and enable Enhanced Safe Browsing in Chrome.
“We routinely upgrade our defenses against such techniques and to secure users who fall victim to malware,” Google stated.
The exploit underscores the need for continuous monitoring of technical vulnerabilities and human intelligence sources to stay ahead of emerging cyber threats.
Google encouraged users to “continually take steps to remove any malware from their computer and we recommend turning on Enhanced Safe Browsing in Chrome to protect against phishing and malware downloads.”
“This exploit enables continuous access to Google services even after a user’s password is reset,” threat intelligence researcher Pavan Karthick M said.
“It highlights the necessity for continuous monitoring of both technical vulnerabilities and human intelligence sources to stay ahead of emerging cyber threats.”
Most Popular:
Epstein’s Brother Finally Breaks His Silence
Chilling Arrest Footage of Trump Co-Defendant Provides Glimpse Into Jack Smith Probe
U.S. State Passes Personal Pronoun Ban
