Hackers Claim Their Remus Gmail Snooping Tool Survives Password Resets

Recent findings from threat intelligence company Hudson Rock have brought to light an info-stealing malware called Remus Stealer, a tool being marketed to cybercriminals that can maintain persistent Gmail access even after a password reset. The company is calling bluff on the supposed claims, however.

Currently, the so-called gold standard advice for anyone caught in a data breach or any kind of compromised situation has been simply: change your password, sign out of all active sessions, and move on with your day. However, the developer of Remus says that it has rewritten the rules. Marketed on cybercrime forums under a hefty subscription model, Remus Stealer claims to let malicious operators peer into victim inboxes (via a stolen device record) from its own dashboard, bypassing traditional cookie theft methods.

The creator also boasts that changing a Google password or revoking regular sessions won't automatically lock Remus out. Theoretically, if bad actors...

Copyright of this story solely belongs to hothardware.com. To see the full text click HERE