Cybercriminals are using a new type of malware named ‘MultiLogin’, which abuses Google’s OAuth endpoint to sign back into user accounts by reviving expired cookies, according to a report by BleepingComputer. The malware reportedly pilfered tokens and account data from Google accounts, including saved passwords to ensure ongoing access to these accounts. Google has yet to acknowledge or suggest mitigation measures for this threat.
Agentic AI could be a blessing and a curse for cybersecurity
Malwarebytes research shows that as agentic AI systems advance, they could become a significant tool for cybercriminals. This technology has the potential to be a