Malware Leveraging Google OAuth for Persistent Account Access

Summary: Information-stealing malware is actively exploiting an undisclosed Google OAuth endpoint called MultiLogin. This technique was initially disclosed by a threat actor named PRISMA on their Telegram channel and has subsequently been integrated into various malware-as-a-service MaaS stealer...

Malware Using Google MultiLogin Exploit to Maintain Access Despite Password Reset

Information stealing malware are actively taking advantage of an undocumented Google OAuth endpoint named MultiLogin to hijack user sessions and allow continuous access to Google services even after a password reset. According to CloudSEK, the critical exploit facilitates session persistence and...

FreeBSD Ports: squirrelmail-multilogin-plugin

The remote host is missing an update to the system as announced in the referenced advisory. VID 0d0237d0-7f68-11de-984d-0011098ad87f OpenVAS Vulnerability Test $ Description: Auto generated from VID 0d0237d0-7f68-11de-984d-0011098ad87f Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

FreeBSD Ports: squirrelmail-multilogin-plugin

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD : SquirrelMail -- Plug-ins compromise (0d0237d0-7f68-11de-984d-0011098ad87f)

The SquirrelMail Web Server has been compromised, and three plugins are affected. The port of squirrelmail-sasql-plugin is safe right MD5, and changepass is not in the FreeBSD ports tree, but multilogin has a wrong MD5. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

SquirrelMail -- Plug-ins compromise

Problem Description: The SquirrelMail Web Server has been compromised, and three plugins are affected. The port of squirrelmail-sasql-plugin is safe right MD5, and changepass is not in the FreeBSD ports tree, but multilogin has a wrong MD5...