[pomatoe]

Informational POC


Multiple information-stealing malware families are abusing an undocumented Google OAuth endpoint named "MultiLogin" to restore expired authentication cookies and log into users' accounts, even if an account's password was reset.
Rhadamanthys, Risepro, Meduza and Stealc Stealer adopted this technique. On December 26, White Snake also implemented the exploit.

thank you so very much sir!

[Justlook]

You are my lord

[0x20]

Nice discovery, that looks OP

[helloworld4]

thank you for the share

[judgeholden]

been patched long ago

[al3]

let me seeeeeeddd

[BryondGoku]

would help in my security findings

[oatmonster]

No way this is still a 0day if you providing the information for free

[idk_anything]

thank you for sharing

[Anti-NATO]

Thanks for your sharing