Multiple information-stealing malware families are abusing an undocumented Google OAuth endpoint named "MultiLogin" to restore expired authentication cookies and log into users' accounts, even if an account's password was reset.
  • @thantikEnglish
    20•11 months ago

    Looks like another good reason not to ever use Chrome – even on Mobile.

    • @[email protected]English
      18•11 months ago

      They seemed to have demonstrated it on chrome and leveraged by the chrome browser but I don’t see why this couldn’t be exploited on any browser.

      • @PretzillaEnglish
        4•11 months ago

        Chromium is implied. Firefox isn’t based on that code base unlike most every other browser.

        • @[email protected]English
          4•11 months ago

          It’s based on security hole in what I’m interpreting as a web API. You leverage a legitimatly logged in Google account on a malicious website and this web endpoint gives you keys to everything else