Posts: 39
Threads: 0
Joined: Oct 2024
Amazing discovery, thanks for sharing this! This forum account is currently banned. Ban Length: Permanent (N/A Remaining) Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.
Posts: 58
Threads: 0
Joined: Oct 2024
Ok impressive Farfallaiero dateline='[url=tel:1703871643' Wrote: 1703871643[/url]']
Informational POC
Multiple information-stealing malware families are abusing an undocumented Google OAuth endpoint named "MultiLogin" to restore expired authentication cookies and log into users' accounts, even if an account's password was reset.
Rhadamanthys, Risepro, Meduza and Stealc Stealer adopted this technique. On December 26, White Snake also implemented the exploit.
Impressive This forum account is currently banned. Ban Length: Permanent (N/A Remaining) Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.
Posts: 16
Threads: 2
Joined: Oct 2024
Posts: 15
Threads: 0
Joined: Apr 2024
thank you for sharing bro
Posts: 21
Threads: 0
Joined: Jul 2024
(Dec 29, 2023, 05:40 PM)Farfallaiero Wrote: Informational POC
Multiple information-stealing malware families are abusing an undocumented Google OAuth endpoint named "MultiLogin" to restore expired authentication cookies and log into users' accounts, even if an account's password was reset.
Rhadamanthys, Risepro, Meduza and Stealc Stealer adopted this technique. On December 26, White Snake also implemented the exploit.
thank you bro for this This forum account is currently banned. Ban Length: Permanent (N/A Remaining) Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.
Posts: 45
Threads: 2
Joined: Jul 2023
Posts: 8
Threads: 0
Joined: Dec 2024
(Dec 29, 2023, 05:40 PM)Farfallaiero Wrote: Informational POC
Multiple information-stealing malware families are abusing an undocumented Google OAuth endpoint named "MultiLogin" to restore expired authentication cookies and log into users' accounts, even if an account's password was reset.
Rhadamanthys, Risepro, Meduza and Stealc Stealer adopted this technique. On December 26, White Snake also implemented the exploit. I like the description, tx you
Posts: 1
Threads: 0
Joined: Dec 2024
Posts: 9
Threads: 1
Joined: Nov 2024
Posts: 32
Threads: 0
Joined: Dec 2024
wuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuut This forum account is currently banned. Ban Length: Permanent (N/A Remaining) Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.
|