Google Chrome vulnerability allows cyberattackers access to Google Accounts

CloudSEK researchers have discovered a serious cookie-related vulnerability in Google Chrome, which could enable unauthorized access to Google accounts.

The flaw is exploited by a new hack that manipulates the OAuth2 authorization protocol. It requires a malware to be installed on the desktop that can regenerate expired Google authentication cookies allowing cybercriminals to breach Google accounts and sustain valid sessions by renewing cookies, even after IP and passwords are changed.

Google has acknowledged recent reports of a malware family that steals session tokens. As a preventative measure against this type of attack, the company recommends enabling Enhanced Safe Browsing in Chrome. This feature offers protection against phishing and malware downloads, adding an extra layer of security for Chrome users.