News and Analysis

Cybercriminals are using a new type of malware named ‘MultiLogin’, which abuses Google’s OAuth endpoint to sign back into user accounts by reviving expired cookies, according to a report by BleepingComputer. The malware reportedly pilfered tokens and account data from Google accounts, including saved passwords to ensure ongoing access to these accounts. Google has yet to acknowledge or suggest mitigation measures for this threat.