Researchers: hackers are abusing Google OAuth endpoint "MultiLogin" to restore expired authentication cookies and log into accounts even after a password reset (Bill Toulas/BleepingComputer)
Main Link | Techmeme Permalink
Main Link | Techmeme Permalink
December 29, 2023 at 7:10 PM
Researchers: hackers are abusing Google OAuth endpoint "MultiLogin" to restore expired authentication cookies and log into accounts even after a password reset (Bill Toulas/BleepingComputer)
Main Link | Techmeme Permalink
Main Link | Techmeme Permalink
🔒 ALERT: Information-stealing malware exploits an undocumented #Google OAuth endpoint, MultiLogin, to hijack user sessions. This allows for session persistence and cookie generation, maintaining access even after a password reset.
thehackernews.com/2024/01/malw...
#cybersecurity
Malware Using Google MultiLogin Exploit to Maintain Access Despite Password Reset
Information-stealing malware is exploiting an undocumented Google OAuth endpoint called MultiLogin to hijack user sessions.
thehackernews.com
January 3, 2024 at 9:39 PM
🔒 ALERT: Information-stealing malware exploits an undocumented #Google OAuth endpoint, MultiLogin, to hijack user sessions. This allows for session persistence and cookie generation, maintaining access even after a password reset.
thehackernews.com/2024/01/malw...
#cybersecurity
Malware abuses Google OAuth endpoint to ‘revive’ cookies, hijack accounts
Malware abuses Google OAuth endpoint to ‘revive’ cookies, hijack accounts
Multiple information-stealing malware families are abusing an undocumented Google OAuth endpoint named "MultiLogin" to restore expired authentication cookies and log into users' accounts, even if an account's password was reset.
www.bleepingcomputer.com
December 29, 2023 at 4:28 PM
Malware abuses Google OAuth endpoint to ‘revive’ cookies, hijack accounts
Top Gologin Alternative:
✅Multilogin: offers a wide range of customization options and is suitable for both individuals and teams.
✅Hidemyacc: providing a high level of anonymity and security, offers advanced fingerprinting techniques.
hidemyacc.com/alternatives...
👇threads
✅Multilogin: offers a wide range of customization options and is suitable for both individuals and teams.
✅Hidemyacc: providing a high level of anonymity and security, offers advanced fingerprinting techniques.
hidemyacc.com/alternatives...
👇threads
The Best Gologin Alternative in 2024 - Hidemyacc
Having trouble with Gologin? Discover Hidemyacc - a powerful 2024 alternative for managing multiple accounts.
hidemyacc.com
February 19, 2025 at 9:25 AM
Top Gologin Alternative:
✅Multilogin: offers a wide range of customization options and is suitable for both individuals and teams.
✅Hidemyacc: providing a high level of anonymity and security, offers advanced fingerprinting techniques.
hidemyacc.com/alternatives...
👇threads
✅Multilogin: offers a wide range of customization options and is suitable for both individuals and teams.
✅Hidemyacc: providing a high level of anonymity and security, offers advanced fingerprinting techniques.
hidemyacc.com/alternatives...
👇threads
Some alternative about antidetect browser 🤾
🔸Gologin Alternative: hidemyacc.com/alternatives...
🔸Adspower Alternative:
hidemyacc.com/alternatives...
🔸Multilogin Alternative:
hidemyacc.com/alternatives...
🔸Dolphin Anty Alternative:
hidemyacc.com/alternatives...
#antidetect #alternative
🔸Gologin Alternative: hidemyacc.com/alternatives...
🔸Adspower Alternative:
hidemyacc.com/alternatives...
🔸Multilogin Alternative:
hidemyacc.com/alternatives...
🔸Dolphin Anty Alternative:
hidemyacc.com/alternatives...
#antidetect #alternative
February 20, 2025 at 7:37 AM
Some alternative about antidetect browser 🤾
🔸Gologin Alternative: hidemyacc.com/alternatives...
🔸Adspower Alternative:
hidemyacc.com/alternatives...
🔸Multilogin Alternative:
hidemyacc.com/alternatives...
🔸Dolphin Anty Alternative:
hidemyacc.com/alternatives...
#antidetect #alternative
🔸Gologin Alternative: hidemyacc.com/alternatives...
🔸Adspower Alternative:
hidemyacc.com/alternatives...
🔸Multilogin Alternative:
hidemyacc.com/alternatives...
🔸Dolphin Anty Alternative:
hidemyacc.com/alternatives...
#antidetect #alternative
[TechSpot]Google OAuth secrets exposed as account-hijacking MultiLogin vulnerability discovered - TechSpot A malware developer was recently able to discover one of Google's OAuth secrets, a previously unknown feature named MultiLogin that is responsible for synchronizing Google accounts across...
January 6, 2024 at 2:00 PM
[TechSpot]Google OAuth secrets exposed as account-hijacking MultiLogin vulnerability discovered - TechSpot A malware developer was recently able to discover one of Google's OAuth secrets, a previously unknown feature named MultiLogin that is responsible for synchronizing Google accounts across...
Malware abuses #Google OAuth endpoint to ‘revive’ cookies, hijack accounts
www.bleepingcomputer.com/news/securit...
www.bleepingcomputer.com/news/securit...
Malware abuses Google OAuth endpoint to ‘revive’ cookies, hijack accounts
Multiple information-stealing malware families are abusing an undocumented Google OAuth endpoint named "MultiLogin" to restore expired authentication cookies and log into users' accounts, even if an a...
www.bleepingcomputer.com
January 1, 2024 at 4:32 PM
Malware abuses #Google OAuth endpoint to ‘revive’ cookies, hijack accounts
www.bleepingcomputer.com/news/securit...
www.bleepingcomputer.com/news/securit...
Multilogin Antidetect Browser
Bypass restrictions and avoid bans. It's the first antidetect browser with 9 years in the industry. Manage multiple accounts. Automate actions on websites. Use premium residential proxies.
multilogin.com/antidetect/a...
multilogin.com/vi-vn/antide...
Bypass restrictions and avoid bans. It's the first antidetect browser with 9 years in the industry. Manage multiple accounts. Automate actions on websites. Use premium residential proxies.
multilogin.com/antidetect/a...
multilogin.com/vi-vn/antide...
November 27, 2024 at 11:50 PM
Multilogin Antidetect Browser
Bypass restrictions and avoid bans. It's the first antidetect browser with 9 years in the industry. Manage multiple accounts. Automate actions on websites. Use premium residential proxies.
multilogin.com/antidetect/a...
multilogin.com/vi-vn/antide...
Bypass restrictions and avoid bans. It's the first antidetect browser with 9 years in the industry. Manage multiple accounts. Automate actions on websites. Use premium residential proxies.
multilogin.com/antidetect/a...
multilogin.com/vi-vn/antide...
Do you want to login with a different account on the same website without logging out the current one?
Multi profile browsing now made easier with Second Login.
deepakpk.com/secondlogin
#mobileapp #Browser #multiprofile #multilogin #mobileapp #android #AndroidApps #DesktopMode #marketing
Multi profile browsing now made easier with Second Login.
deepakpk.com/secondlogin
#mobileapp #Browser #multiprofile #multilogin #mobileapp #android #AndroidApps #DesktopMode #marketing
Second Login - Multi-Profile Browser for Android
deepakpk.com
September 9, 2025 at 5:51 PM
Do you want to login with a different account on the same website without logging out the current one?
Multi profile browsing now made easier with Second Login.
deepakpk.com/secondlogin
#mobileapp #Browser #multiprofile #multilogin #mobileapp #android #AndroidApps #DesktopMode #marketing
Multi profile browsing now made easier with Second Login.
deepakpk.com/secondlogin
#mobileapp #Browser #multiprofile #multilogin #mobileapp #android #AndroidApps #DesktopMode #marketing
Manage multiple accounts on websites from your mobile device, try the Second Login app for Android.
Features like website management, profile management, and desktop mode view. Super easy and clean UI 🎉
#Browser #multiprofile #multilogin #mobileapp #android #AndroidApps
deepakpk.com/secondlogin
Features like website management, profile management, and desktop mode view. Super easy and clean UI 🎉
#Browser #multiprofile #multilogin #mobileapp #android #AndroidApps
deepakpk.com/secondlogin
Second Login - Multi-Profile Browser for Android
deepakpk.com
August 21, 2025 at 8:27 AM
Manage multiple accounts on websites from your mobile device, try the Second Login app for Android.
Features like website management, profile management, and desktop mode view. Super easy and clean UI 🎉
#Browser #multiprofile #multilogin #mobileapp #android #AndroidApps
deepakpk.com/secondlogin
Features like website management, profile management, and desktop mode view. Super easy and clean UI 🎉
#Browser #multiprofile #multilogin #mobileapp #android #AndroidApps
deepakpk.com/secondlogin
#ZeroDay revealed in Oct still unpatched. #Google’s implementation of #OAuth2 allows malware to steal and reuse cookies—even if expired.
And changing your password won’t help. In #SBBlogwatch, we wish you a happy new year. At @TechstrongGroup’s @SecurityBlvd: securityboulevard.com/2024/01/goog...
And changing your password won’t help. In #SBBlogwatch, we wish you a happy new year. At @TechstrongGroup’s @SecurityBlvd: securityboulevard.com/2024/01/goog...
Google Whistles While OAuth Burns — ‘MultiLogin’ 0-Day is 70+ Days Old
What a Mickey Mouse operation: Infostealer scrotes having a field day with unpatched vulnerability.
securityboulevard.com
January 2, 2024 at 4:53 PM
#ZeroDay revealed in Oct still unpatched. #Google’s implementation of #OAuth2 allows malware to steal and reuse cookies—even if expired.
And changing your password won’t help. In #SBBlogwatch, we wish you a happy new year. At @TechstrongGroup’s @SecurityBlvd: securityboulevard.com/2024/01/goog...
And changing your password won’t help. In #SBBlogwatch, we wish you a happy new year. At @TechstrongGroup’s @SecurityBlvd: securityboulevard.com/2024/01/goog...
Malware abuses Google OAuth endpoint to 'revive' cookies, hijack accounts
マルウェアがGoogle OAuthエンドポイントを悪用してクッキーを「復活」させ、アカウントを乗っ取る
🔺 223
💬 13
🔗 HN Post | Article
マルウェアがGoogle OAuthエンドポイントを悪用してクッキーを「復活」させ、アカウントを乗っ取る
🔺 223
💬 13
🔗 HN Post | Article
Malware abuses Google OAuth endpoint to ‘revive’ cookies, hijack accounts
Multiple information-stealing malware families are abusing an undocumented Google OAuth endpoint named "MultiLogin" to restore expired authentication cookies and log into users' accounts, even if an account's password was reset.
www.bleepingcomputer.com
January 1, 2024 at 9:43 AM
Multilogin repositions as cloud-phone platform with free plan
Multilogin repositions as cloud-phone platform with free plan
Each cloud phone is presented as a separate device, letting teams give every account its own mobile environment and keep apps, sessions and login history isolated, one per account.
dlvr.it
September 14, 2026 at 3:08 PM
Multilogin repositions as cloud-phone platform with free plan
Multilogin repositions as cloud-phone platform with free plan
Multilogin repositions as cloud-phone platform with free plan
Each cloud phone is presented as a separate device, letting teams give every account its own mobile environment and keep apps, sessions and login history isolated, one per account.
dlvr.it
September 14, 2026 at 3:10 PM
Multilogin repositions as cloud-phone platform with free plan
📌 Multilogin: Understanding the Antidetect Multi-Account Browser https://www.cyberhub.blog/article/31734-multilogin-understanding-the-antidetect-multi-account-browser
Multilogin: Understanding the Antidetect Multi-Account Browser
Multilogin is a multi-account browser that provides profile isolation capabilities for web browsing. The article discusses how this antidetect browser functions and what differentiates it from traditional browser containers and separate profiles. The content explains use cases for employing such a multi-account browsing solution.
www.cyberhub.blog
September 8, 2026 at 10:37 AM
📌 Multilogin: Understanding the Antidetect Multi-Account Browser https://www.cyberhub.blog/article/31734-multilogin-understanding-the-antidetect-multi-account-browser
Compared 10 antidetect browsers for 2026 on fingerprint protection, pricing, and automation. Hidemyacc, Multilogin, GoLogin, AdsPower, Dolphin Anty and more, tested side by side.
Full breakdown here: hidemyacc.com/best-antidet...
#AntidetectBrowser #DigitalPrivacy
Full breakdown here: hidemyacc.com/best-antidet...
#AntidetectBrowser #DigitalPrivacy
10 Best Antidetect Browsers for 2026, Tested & Compared
See how 10 antidetect browsers compare on price, fingerprint protection, and free trials — then try Hidemyacc's 7-day trial to test it yourself.
hidemyacc.com
August 26, 2026 at 8:50 AM
Compared 10 antidetect browsers for 2026 on fingerprint protection, pricing, and automation. Hidemyacc, Multilogin, GoLogin, AdsPower, Dolphin Anty and more, tested side by side.
Full breakdown here: hidemyacc.com/best-antidet...
#AntidetectBrowser #DigitalPrivacy
Full breakdown here: hidemyacc.com/best-antidet...
#AntidetectBrowser #DigitalPrivacy
You need to read this : The $6.99 Multilogin Orbita Alternative for Profile Isolation
blog.send.win/the-6-99-mul...
blog.send.win/the-6-99-mul...
August 8, 2026 at 4:15 AM
You need to read this : The $6.99 Multilogin Orbita Alternative for Profile Isolation
blog.send.win/the-6-99-mul...
blog.send.win/the-6-99-mul...
from the first time I heard these kind of things proposed, I've never been convince the 'one authentication to rule them all' operations were a good idea...
Malware abuses Google OAuth endpoint to ‘revive’ cookies, hijack accounts
Multiple information-stealing malware families are abusing an undocumented Google OAuth endpoint named "MultiLogin" to restore expired authentication cookies and log into users' accounts, even if an a...
www.bleepingcomputer.com
December 31, 2023 at 8:34 PM
from the first time I heard these kind of things proposed, I've never been convince the 'one authentication to rule them all' operations were a good idea...
Multilogin — антидетект-браузер для арбитража с поддержкой API blog.themarfa.name/multilogin-a...
Multilogin — антидетект-браузер для арбитража с поддержкой API
Multilogin: антидетект-браузер с настройкой профилей, API и шаблонами; пробный тариф €1.99/3 дня, платно от €5.85/мес за 10 профилей.
blog.themarfa.name
October 22, 2025 at 7:38 AM
Multilogin — антидетект-браузер для арбитража с поддержкой API blog.themarfa.name/multilogin-a...
Self-hosted Multilogin alternative for isolated browser profiles
May 14, 2026 at 10:39 AM
Self-hosted Multilogin alternative for isolated browser profiles
According to security firm CloudSEK, a threat actor under the alias PRISMA boasted a potent zero-day exploit and developed a sophisticated solution to generate persistent Google cookies through token manipulation. cybernews.com/news/google-...
Google accounts may be vulnerable to new hack, changing password won’t help | Cybernews
CloudSEK's threat research team identified the exploit's root at an undocumented Google Oauth endpoint named “MultiLogin.”
cybernews.com
December 30, 2023 at 8:32 PM
According to security firm CloudSEK, a threat actor under the alias PRISMA boasted a potent zero-day exploit and developed a sophisticated solution to generate persistent Google cookies through token manipulation. cybernews.com/news/google-...
