CONNECT WITH US
Tech

Tech

Dangerous new Gmail exploit lets hackers read your emails for a monthly fee of $1,000 — and it even works after a password reset

Tom's Guide logo

Published on

Add as a preferred source on Google
Dangerous new Gmail exploit lets hackers read your emails for a monthly fee of $1,000 — and it even works after a password reset

A developer of hacking tools is advertising a $ 1,000-per-month feature that allegedly lets bad actors have continuous access to vulnerable Gmail inboxes. The report from the cybersecurity firm Hudson Rock claims the tool can keep accessing victims' Gmail inboxes even after password changes, browser closure and session revocations.

If this is true, it means that hackers could get access to password reset links, verification codes and therefore access to other accounts.

The malware, called Remus Stealer, supposedly gives bad actors a searchable inbox directly inside a stolen dashboard.

Hudson Rock says it spoke with the developer and a customer, who used the tool and provided them with screenshots of email messages, timestamps and control for sharing an impacted mailbox with other operators.

Per the security firm, the email-intercepting tool doesn't collect browser cookie files and Remus claims that password changes do not stop it.

It somehow avoids Google's anti-fraud checks, though the developer didn't give Hudson Rock any technical details, for obvious reasons. Remus did say that it interacts with browser memory. This doesn't explain how it survives password changes or session revocation though.

“The leading broad explanation is that Remus acquires or establishes reusable authorization while it has access to a signed-in browser. A remote component could then request mail after the local executable exits, for as long as the service accepts that authorization,” Hudson Rock wrote in its report.

Tom's Guide reached out to Google about this tool and will update this article if and when the company responds.


Source link
Related Topics:Tech

Disclaimer

We strive to uphold the highest ethical standards in all of our reporting and coverage. We TheMorningPulse.fyi want to be transparent with our readers about any potential conflicts of interest that may arise in our work. It's possible that some of the investors we feature may have connections to other businesses, including competitors or companies we write about. However, we want to assure our readers that this will not have any impact on the integrity or impartiality of our reporting. We are committed to delivering accurate, unbiased news and information to our audience, and we will continue to uphold our ethics and principles in all of our work. Thank you for your trust and support.