Remus Stealer Markets Persistent Gmail Access: Hudson Rock Investigates
Hudson Rock reports that the Remus Stealer service is advertising a feature that lets buyers open a compromised Gmail inbox from a stolen-device record, with the developer and a customer claiming access continues after password changes and session revocation. Hudson Rock says the evidence does not demonstrate a Gmail zero-day or show fresh mail being retrieved after a complete recovery, and that the most plausible explanation is reuse of access obtained during the initial device compromise.