Remus Stealer advertises $1,000 Gmail access that survives resets
Hudson Rock has not verified persistence after password changes or a Gmail vulnerability.
Stories per day · 30 days
2 RSS
Relatedgemini5google5credential-theft3infostealer3personal-intelligence3privacy3advertising2autofill2chrome2credential-access1darkcore1discord1google-photos1hudson-rock1maas1passkeys1password-manager1personalized-ads1
13 stories, newest first · one card per story
Stories tagged #gmail
VOLTA Malware Steals Gmail and Discord Sessions Using AI to Build Victim Profiles
The VOLTA-AUTODOXER infostealer steals sessions and uses OpenRouter AI to draft forensic victim profiles ranking valuables and opsec.
1
Chrome AI autofill can fill forms using Gmail details
Optional US suggestions may include confirmation numbers, membership IDs, addresses, phone numbers, and card numbers.
Phisher adds a Google passkey after a fake YouTube support email
The victim entered a password and two 2FA codes; attackers then viewed two Drive spreadsheets and deleted the lure.
DarkCore RAT Enables Session Hijacking of Gmail and WhatsApp
DarkCore RAT allows attackers to hijack authenticated sessions in Gmail, WhatsApp and MediaFire using stolen cookies without needing passwords, requiring an existing endpoint foothold.
Google says opted-in Gmail and Photos data can personalize Search ads
The October 16 policy says ads are not personalized from Gmail, Drive or Photos unless users share that data with other Google services.
Google privacy update may let Gmail data inform AI ads
The October 16 wording drops a ban on ads based on Drive, Gmail, or Photos content shared with other Google services.
Google policy lets connected Gmail and Photos data inform ads
As of October 16, linking Drive, Gmail, or Photos to Personal Intelligence can also feed personalized ads.
New Unicode Characters Let Attackers Create Convincing Lookalike Domains for Phishing
Researchers showed Chromium can display Unicode brand lookalike domains as readable text, bypassing Punycode warnings.
A Gmail-Based Phishing Detection Prototype for Nigerian Fintech Emails Using Sender Checks and BiLSTM Classification
A Gmail extension prototype detects Nigerian fintech phishing with sender checks and a BiLSTM classifier.
ChatGPT flaw lets attackers pull Gmail data across accounts via a hidden channel
Check Point found a ChatGPT flaw letting attackers read victims' Gmail and connected-app data via hidden cross-session instructions; OpenAI patched it.
2
ChatGPT Flaw Could Let Attackers Steal Gmail Data Across User Accounts
Check Point found a patched ChatGPT flaw where prompt injection and a shared Artifactory service let attackers covertly exfiltrate Gmail data across accounts.
2
What’s the Scam?
Bruce Schneier reports AI-generated fake thank-you replies to his newsletter confirmations from throwaway Gmail accounts; the scam's goal is unclear.