Remus Stealer advertises $1,000 Gmail access that survives resets
Original title: Hackers Advertise a $1,000 Gmail Tool That Allegedly Survives Password Resets
Hudson Rock has not verified persistence after password changes or a Gmail vulnerability.
Security Affairs reports that Remus Stealer is advertising an Enterprise feature at $1,000 a month that its developer says keeps reading a Gmail inbox after password changes and session revocation. Hudson Rock says a customer provided screenshots and that the feature can share an already compromised mailbox, but it has not confirmed the mechanism or run a controlled test. The firm still recommends cleaning the infected computer before changing passwords on a clean device and reviewing sessions and third-party access.
Unconfirmed: Persistence after password changes and any Gmail vulnerability remain unverified marketing claims.
- Basic, Pro and Enterprise tiers are listed at $250, $500 and $1,000.
- The pitch is version 1.3.9 and claims no browser-cookie collection.
- A customer reportedly showed messages, timestamps and mailbox sharing.
- Hudson Rock says attackers must first infect the computer.
- The developer calls it a Gmail zero-day; that claim is unreproduced.
Impact: Claimed persistent read access to a compromised Gmail inbox
- 1.Disconnect and clean the infected computer before reusing accounts.
- 2.Change passwords from a clean device and remove suspicious sessions.
- 3.Review Gmail settings and accounts that rely on that mailbox.
- ATT&CK
- T1114 Email Collection
- Vendors
- Products
- Gmail
- Malware
- Remus Stealer
- Organizations
- Hudson Rock
From the original article
4 min read at securityaffairs.com
Hackers advertise a $1,000-a-month tool claiming persistent Gmail access after password resets, but its effectiveness remains unverified. A developer of hacking tools is selling a $1,000 per month feature that allegedly gives criminals continuous access to Gmail inboxes. The cybersecurity firm Hudson Rock reports that the tool can keep reading a victim’s mailbox after a […]
By Pierluigi Paganini · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.