[Nevertheless]

This has been around for a while yeah

[yuppie]

Thank's for the exploit

[musahaha32]

Amazing discovery, thanks for sharing this!

[kr_dx]

Thanks for sharing!

[qeodl]

Thank you very much!

[pwnipotent]

Informational POC


Multiple information-stealing malware families are abusing an undocumented Google OAuth endpoint named "MultiLogin" to restore expired authentication cookies and log into users' accounts, even if an account's password was reset.
Rhadamanthys, Risepro, Meduza and Stealc Stealer adopted this technique. On December 26, White Snake also implemented the exploit.

thats so lit. any idea if this still works?

[Myszkin]

lests test and see this

[eclipse360]

thanks for sharing

[izdirap]

Amazing discovery, thanks for sharing this!

[z1ne99]

damn, that's a great share, thanks!