Remus malware claims Gmail access even after you change your password
Source: Malwarebytes Labs
At a glance
Changing your password should be part of recovering a compromised account. The developers of Remus Stealer are advertising a Gmail-reading feature they claim can survive that step and even session revocation. That is a serious claim. It is not, however, a demonstrated capability in the published investigation. Threat intelligence company Hudson Rock examined Remus’s promotional material and questioned both its developer and a self-described customer. Its conclusion is more cautious than the sales pitch: The material depicts a mailbox-reading interface, but it does not establish that Remus can…