[pomatoe]

Informational POC


Multiple information-stealing malware families are abusing an undocumented Google OAuth endpoint named "MultiLogin" to restore expired authentication cookies and log into users' accounts, even if an account's password was reset.
Rhadamanthys, Risepro, Meduza and Stealc Stealer adopted this technique. On December 26, White Snake also implemented the exploit.

thank you so very much sir!

[Justlook]

You are my lord

[0x20]

Nice discovery, that looks OP

[helloworld4]

thank you for the share

[judgeholden]

been patched long ago

[al3]

let me seeeeeeddd

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.

[BryondGoku]

would help in my security findings

[oatmonster]

No way this is still a 0day if you providing the information for free

[idk_anything]

thank you for sharing

[Anti-NATO]

Thanks for your sharing

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Attempted Scamming | Public Data | https://breachforums.rs/Forum-Ban-Appeals if you feel this is incorrect.