Connect with us

Technology

Beware of this sneaky Google attack that steals your expired cookies

Published

on

Beware of this sneaky Google attack that steals your expired cookies

A new exploit threat lets hackers access your Google account using expired cookies that contain your login information. The exploits, which were discovered late last year, target session cookies, which only have a limited lifespan. However, they can “revive” those cookies, putting your personal information at risk.

A hacker named PRISMA first revealed they found a way to bring back expired Google session cookies. Since then, cybersecurity firm CloudSEK discovered an exploit in a program that allows users to synchronize their Google accounts across multiple devices. Now, hackers are using that exploit to steal your login and other information. Here’s a breakdown of how it all unfolded and how you can protect yourself.

CLICK TO GET KURT’S FREE CYBERGUY NEWSLETTER WITH SECURITY ALERTS, QUICK VIDEO TIPS, TECH REVIEWS AND EASY HOW-TO’S TO MAKE YOU SMARTER

Google Chrome start-up page (Kurt “CyberGuy” Knutsson)

Advertisement

Exploiting Google’s MultiLogin

As reported by BleepingComputer, certain malware strains have discovered a backdoor into Google’s authentication system. The vulnerability lies in the MultiLogin endpoint, which remains undocumented and largely unknown to the public. This clandestine gateway enables threat actors to revive expired authentication cookies, granting unauthorized access to users’ Google accounts.

Google Chrome start-up page (Kurt “CyberGuy” Knutsson)

MORE: BEWARE OF THIS MCAFEE GOOGLE CHROME AD SCAM

The role of session cookies

Before we dive deeper, let’s understand the role of session cookies. These specialized browser cookies contain authentication information. If you’ve ever experienced the convenience of returning to a site without re-entering your credentials, you’ve encountered session cookies. However, their design intentionally limits their lifespan to prevent prolonged unauthorized access.

MORE: HOW GOOGLE’S DATA CAN MAKE YOU A SUSPECT IN A CRIME YOU DIDN’T COMMIT

Advertisement

The Lumma and Rhadamanthys connection

In November of last year, cybercriminals associated with the Lumma and Rhadamanthys info-stealing malware strains made a bold claim: they could resurrect expired Google Authentication cookies stolen during cyberattacks. Armed with these seemingly defunct cookies, a hacker gains entry to a victim’s Google account, even if the user has logged out, reset their password, or their session has expired.

PRISMA’s revelation

The exploit’s origins trace back to a Telegram post by a threat actor known as PRISMA. In October, they unveiled their discovery: a method to restore Google authentication cookies that had reached their expiration date. This revelation set the stage for further investigation.

CloudSEK’s investigation

Enter CloudSEK, a cybersecurity firm committed to predicting and preventing cyberattacks. Their researchers took on the challenge, reverse engineering the exploit. Their findings revealed that the MultiLogin endpoint served as the linchpin for the hackers. This undocumented feature facilitates account synchronization across various Google services, making it an ideal target for malicious actors’ nefarious activities.

Google Chrome start-up page (Kurt “CyberGuy” Knutsson)

MORE: GOOGLE FINALLY ADMITS DATA COLLECTION IN CHROME’S INCOGNITO MODE

Advertisement

Protecting against MultiLogin exploit

The exploitation of MultiLogin raises serious concerns for those of you who are Google account holders. To safeguard against this threat, consider the following steps:

1) Sign out of the affected browser: Google is aware of this issue and has taken action to secure compromised accounts. Google’s recommendation is to simply sign out of the affected browser to revoke session cookies.

2) Enhanced Safe Browsing: Enable Enhanced Safe Browsing in Chrome for additional protection against malware and phishing attacks.

On your computer:

  • Open Google Chrome on your computer
  • Click the initial in the top-right corner of the browser window
  • Tap Manage your Google Account 
  • Click Security on the left
  • Under Enhanced Safe Browsing for your account – make sure it is turned On

On your smartphone:

  • Open Google Chrome on your computer
  • Click the initial in the top-right corner of the browser window
  • Tap Google Account 
  • Click Security 
  • Scroll down and under Enhanced Safe Browsing for your account – make sure it is turned On

3) Regularly change passwords: Regularly change your Google password to keep your account safe from hackers. If you struggle with creating new passwords, consider using a password manager.

4) Have good antivirus software on all your devices: The best way to protect yourself from having your data breached is to have antivirus protection installed on all your devices. Choose the best option for your PC, Mac, iPhone or Android smartphone. Having good antivirus software actively running on your devices will alert you of any malware in your system, warn you against clicking on any malicious links in phishing emails and ultimately protect you from being hacked. Get my picks for the best 2024 antivirus protection winners for your Windows, Mac, Android & iOS devices.

Advertisement

Kurt’s key takeaways

In light of the recent exploits targeting Google accounts through resurrected session cookies, it’s imperative to strengthen our defenses against such cyberthreats. From the initial discovery by PRISMA to the subsequent investigations by CloudSEK, the vulnerabilities in Google’s MultiLogin endpoint have now been exposed.

To protect your account, ensure you sign out of affected browsers, enable Enhanced Safe Browsing, regularly update passwords, and have good antivirus software across all your devices. By implementing these security measures, you can thwart attempts to compromise your online privacy and safeguard your digital identities.

How important do you think it is for technology companies like Google to continually update and enhance their security protocols to protect you from evolving cyberthreats? Let us know by writing us at Cyberguy.com/Contact.

For more of my tech tips & security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter.

Ask Kurt a question or let us know what stories you’d like us to cover.

Advertisement

Answers to the most asked CyberGuy questions:

Copyright 2024 CyberGuy.com. All rights reserved.

Advertisement

Technology

This pasta sauce wants to record your family

Published

on

This pasta sauce wants to record your family

As if there weren’t already enough devices listening in on everything being said in your home, Prego, the pasta and pizza sauce brand, is releasing a device designed to record everything said around the dinner table for posterity. The Connection Keeper, which looks like an oversized pasta jar lid, was created in collaboration with StoryCorps, the nonprofit organization focused on preserving the stories of Americans in a collection housed at the Library of Congress’ American Folklife Center. There’s no AI, Wi-Fi, or Bluetooth, but you can optionally upload recordings to StoryCorps’ website to make them easier to share with family.

Prego says the goal of the device is to encourage families to make memories through conversation during dinner instead of staring at their phones — but only for a small number of families. The company is only planning to make less than 100 of them. The Connection Keeper will be available for purchase online starting on April 27th for $20 as part of a bundle that includes the device, a jar of Prego sauce, spaghetti noodles, and a deck of cards featuring conversation prompts and ideas.

Using the device is as easy as plopping the Connection Keeper down in the middle of everyone at the table and pressing one button to start recording. Using a pair of microphones, it captures CD-quality audio to a 16GB microSD card for up to eight hours when fully charged.

When dinner’s over, the recordings can be transferred to a computer over USB-C and then uploaded to a dedicated microsite created by StoryCorps where they’re preserved and accessible only by the uploader, unless they choose to share them with other StoryCorps users or the general public. You even have the option to archive them within the Library of Congress, which makes them public automatically, so hopefully your family talks about more than just stealing brainrots.

The recordings can be accessed on a smartphone through the StoryCorps app, but Prego intentionally left phones out of the rest of the process to discourage their use at the table. It’s also why the Connection Keeper lacks a screen. The goal was to minimize interactions with the device so family members instead focused on talking with each other.

Advertisement
Continue Reading

Technology

BMW puts humanoid robots to work building EVs

Published

on

BMW puts humanoid robots to work building EVs

NEWYou can now listen to Fox News articles!

BMW Group has spent years testing automation, but this latest move feels different. Instead of robotic arms locked in cages, the company is now using humanoid robots that move through factories more like people. After a successful pilot in Spartanburg, South Carolina, BMW is bringing that same idea into its Leipzig, Germany, factory, where it is testing robots in real production environments. This time, it is partnering with Hexagon Robotics to introduce a new generation of AI-powered machines. Unlike many robot demos you see online, this one is already being tested inside a real production environment.

Sign up for my FREE CyberGuy Report

  • Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
  • For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.

Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.

CHINESE ROBOT BREAKS HUMAN WORLD RECORD IN BEIJING HALF-MARATHON

BMW’s new AI-driven robots are now operating inside active factories, marking a shift from traditional automation to flexible, human-like systems. (Christof Rührmair/picture alliance via Getty Images)

Advertisement

How BMW’s humanoid robot pilot built over 30,000 vehicles

BMW’s earlier pilot used Figure 02 humanoid robots for a very specific task. They handled the precise positioning of sheet metal for welding on the BMW X3 production line. That task may seem small, but it plays a key role in keeping production moving smoothly. Precision work like this can easily slow things down or create bottlenecks. According to BMW, those robots helped contribute to building more than 30,000 vehicles. Because of that success, the company now feels confident about expanding the concept. Instead of limiting testing to one plant, BMW is moving forward with its iFACTORY initiative in Leipzig, where EV production is already a major focus.

BMW’s new AI humanoid robots for EV factories

The new robots, called AEON, come from Hexagon Robotics. They are designed to work inside active factory environments without constant human direction. They rely on AI-based motion control, which helps them move through complex spaces. At the same time, built-in sensors allow them to understand their surroundings in real time. Because of that, they can adjust their actions on the fly instead of following fixed instructions. Hexagon refers to this as “Physical AI.” In simple terms, the robot can make decisions based on what it sees around it. As a result, the robot does not stop when something unexpected happens. Instead, it adapts and keeps working. That marks a clear shift from traditional factory automation.

Why BMW is investing in humanoid robots now

BMW executives have made it clear that this is not about replacing people overnight. Instead, the goal is to test what actually works in real production environments. Michael Nikolaides, who oversees BMW’s production network, says these pilot programs help the company refine how AI-powered robots learn on the job. He goes on to point to a broader vision, saying: “Digitalization improves the competitiveness of our production, here in Europe and worldwide. The symbiosis of engineering expertise and artificial intelligence opens up entirely new possibilities in production.” There is also a practical reason for the humanoid design. Factories are already built for human workers. Because of that, a robot that can use the same spaces and tools is much easier to integrate than one that requires a complete redesign.

HUMANOID ROBOTS HIT MASS PRODUCTION IN CHINA

After a successful U.S. pilot, BMW is deploying humanoid robots in Leipzig to improve efficiency and adaptability in electric vehicle manufacturing. (Christof Rührmair/picture alliance via Getty Images)

Advertisement

How humanoid robots could transform factory work

For years, humanoid robots felt more like something you saw in those social media demo videos than something you would trust on a real factory floor. Yes, they looked impressive, but they struggled in real environments. That is starting to change. Factories are still unpredictable. Parts do not always arrive in the exact same position. Workers move around constantly, and tools and materials shift throughout the day. Because of this, traditional robots often struggle since they rely on tightly controlled conditions. AI-powered humanoid robots can handle that kind of variability. They move around people and equipment without stopping. They adjust when parts are slightly off, and they work in spaces built for human workers.  That level of flexibility is what sets this new wave of AI-powered robotics apart from earlier forms of automation.

What this means to you

Even if you never step inside a factory, this shift still matters. For one, it could change how cars are built, whether they are electric or gas. When production speeds up, costs can come down over time, which could affect what you pay for your next vehicle. At the same time, factory jobs are likely to change. Some repetitive or physically demanding work may move to robots. In many cases, that means people shift into roles focused on oversight, maintenance or more skilled tasks. Step back for a second, and you can see this is a sign of where AI is headed next. It is no longer limited to apps on your phone or software on your computer. Now, it is starting to show up in the physical world in ways you can actually see and interact with.

Take my quiz: How safe is your online security?

Think your devices and data are truly protected? Take this quick quiz to see where your digital habits stand. From passwords to Wi-Fi settings, you’ll get a personalized breakdown of what you’re doing right and what needs improvement. Take my Quiz here: Cyberguy.com   

HOME ROBOT COOKS, CLEANS AND ORGANIZES YOUR LIFE

Advertisement

BMW is expanding its humanoid robot program into a German EV factory, testing AI-powered machines designed to work alongside humans in real production environments. (Christof Rührmair/picture alliance via Getty Images)

Kurt’s key takeaways

BMW is not the only company testing humanoid robots, but it is one of the first to bring them into real production environments. That is a big shift from the testing phase most of us are used to seeing. The fact that these robots are already helping build tens of thousands of vehicles shows that this is moving beyond early trials. It is starting to become part of how factories actually run. Where this goes next is still an open question. If the technology keeps improving, you could see more of these robots show up in factories and warehouses over time.

So here is the bigger question. How do you feel about humanoid robots working alongside people in factories? Would you trust them to help build the car you drive? Let us know by writing to us at Cyberguy.com

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Sign up for my FREE CyberGuy Report

Advertisement
  • Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
  • For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
  • Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join. 

Copyright 2026 CyberGuy.com.  All rights reserved.

Continue Reading

Technology

Blue Origin successfully reused its New Glenn rocket

Published

on

Blue Origin successfully reused its New Glenn rocket

Today’s launch of AST SpaceMobile’s BlueBird 7 satellite aboard Blue Origin’s reusable New Glenn rocket was a partial success. The New Glenn touched down on its landing pad without incident, making it the second launch and landing for the first stage booster, and officially giving Jeff Bezos a reusable launch vehicle. Unfortunately for AST SpaceMobile, the mission was less successful. Its cell-tower-in-space was delivered to a lower orbit than expected by the second stage of the launch vehicle, rendering it functionally useless.

While the satellite separated from the launch vehicle and powered on, the altitude is too low to sustain operations with its on-board thruster technology and will de-orbited.

Bezos, for his part, posted a video of the landing on X without comment.

Continue Reading
Advertisement

Trending