authentication cookies

Google downplays reports of malware abusing an undocumented Chrome API to generate new authentication cookies, saying such token theft attacks “are not new”

Google is downplaying reports of malware abusing an undocumented Google Chrome API to generate new authentication cookies when previously stolen ones have expired.

Researchers: hackers are abusing Google OAuth endpoint “MultiLogin” to restore expired authentication cookies and log into accounts even after a password reset

Researchers: hackers are abusing Google OAuth endpoint “MultiLogin” to restore expired authentication cookies and log into accounts even after a password reset

Multiple information-stealing malware families are abusing an undocumented Google OAuth endpoint named “MultiLogin” …