Subj : This devious malware will let hackers restore deleted cookies and
To   : All
From : TechnologyDaily
Date : Wed Nov 22 2023 19:30:05

This devious malware will let hackers restore deleted cookies and hijack your 
Google account

Date:
Wed, 22 Nov 2023 19:19:09 +0000

Description:
It's a one-off, so hackers need to be careful. Still, it could be enough to 
mount a devastating cyberattack.

FULL STORY
======================================================================

The latest version of the Lumma infostealer malware has a rather interesting 
feature - it is able to restore expired Google cookies, which can then be 
used to access the victims Google account. 

The findings come from cybersecurity researchers from Hudson Rock, who have 
warned it could spell disaster even for organizations that follow best 
practices in terms of cybersecurity. 

The team discovered an ad for the feature posted on a dark web forum which 
said that the version released on November 14 can restore dead cookies using 
a key from restore files. The ad further stresses that this only applies to 
Google cookies. 

 Reader Offer: $50 Amazon gift card with demo 
 Perimeter 81's Malware Protection intercepts threats at the delivery stage 
to prevent known malware, polymorphic attacks, zero-day exploits, and more. 
Let your people use the web freely without risking data and network security. 

 Preferred partner ( What does this mean? ) Fixing the bugs (in silence) 

Hackers interested in purchasing this version of the infostealer should 
prepare $1,000, as thats how much a single months subscription costs. 

Lummas developers further explained that every session cookie can be used no 
more than two times, meaning that it can only be restored once. That, 
however, is more than enough to mount a devastating attack against any 
organization, BleepingComputer comments. 

Google has so far been silent on the matter, but it hopefully working in the 
background to solve the issue. 

The company has not commented on the findings, but a few days after being 
tipped off, Lumma released a new version that bypasses newly introduced 
restrictions set up by Google. So its safe to assume that right now, its a 
bit of a back-and-forth between Google and Lumma. 

To make matters worse, it seems that Lumma isnt the only infostealer with 
cookie-restoring capabilities out there, either. Rhadamanthys recently 
announced a similar feature, prompting the media to speculate that hackers 
may have found a security vulnerability. Lummas developers would disagree, 
though, as in a discussion with BleepingComputer they said that Rhadamanthys 
blatantly copied their design. 

At this moment its difficult to determine if the feature even works as 
advertised or not. To be on the safe side, just make sure to only download 
programs and applications from verified sources. More from TechRadar Pro Mac 
users targeted in new malvertising campaign delivering Atomic Stealer Here's 
a list of the best firewalls around today These are the best endpoint 
security tools right now



======================================================================
Link to news story:
https://www.techradar.com/pro/security/this-devious-malware-will-let-hackers-r
estore-deleted-cookies-and-hijack-your-google-account


--- Mystic BBS v1.12 A47 (Linux/64)
 * Origin: tqwNet Technology News (1337:1/100)

.