Remus Stealer Markets Persistent Gmail Access: Hudson Rock Investigates

Hudson Rock reports that the Remus Stealer service is advertising a feature that lets buyers open a compromised Gmail inbox from a stolen-device record, with the developer and a customer claiming access continues after password changes and session revocation. Hudson Rock says the evidence does not demonstrate a Gmail zero-day or show fresh mail being retrieved after a complete recovery, and that the most plausible explanation is reuse of access obtained during the initial device compromise.

Source: www.infostealers.com

Curated Permalink