Multiple information-stealing malware families are abusing an undocumented Google OAuth endpoint named "MultiLogin" to restore expired authentication cookies and log into users' accounts, even if an account's password was reset.
  • thantik@lemmy.worldEnglish
    255·
    11 months ago

    Looks like another good reason not to ever use Chrome – even on Mobile.

    • epyon22@programming.devEnglish
      19·
      11 months ago

      They seemed to have demonstrated it on chrome and leveraged by the chrome browser but I don’t see why this couldn’t be exploited on any browser.

      • Pretzilla@lemmy.worldEnglish
        62·
        11 months ago

        Chromium is implied. Firefox isn’t based on that code base unlike most every other browser.

        • epyon22@programming.devEnglish
          4·
          11 months ago

          It’s based on security hole in what I’m interpreting as a web API. You leverage a legitimatly logged in Google account on a malicious website and this web endpoint gives you keys to everything else