Tag: MultiLogin
-
Hacking Google: From Password Resets to Persistent Access
According to a report presented by CloudSEK, a new hacking method enables hackers to exploit the OAuth 2.0 authorization protocol functionality to compromise Google accounts. This technique maintains valid sessions by regenerating cookie files, even after changing the IP address or password. The attack, executed via an undocumented Google Oauth access point named “MultiLogin,” was…