{"id":735,"date":"2024-01-04T17:42:52","date_gmt":"2024-01-04T20:42:52","guid":{"rendered":"https:\/\/techsecurity.com.br\/?p=735"},"modified":"2024-01-04T17:50:27","modified_gmt":"2024-01-04T20:50:27","slug":"malware-explora-google-multilogin-para-manter-o-acesso-apos-redefinicao-de-senha","status":"publish","type":"post","link":"https:\/\/techsecurity.com.br\/2024\/01\/malware-explora-google-multilogin-para-manter-o-acesso-apos-redefinicao-de-senha\/","title":{"rendered":"Malware explora Google MultiLogin para manter o acesso ap\u00f3s redefini\u00e7\u00e3o de senha"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Novo malware da familia Information stealing est\u00e1 explorando um endpoint OAuth do Google n\u00e3o documentado chamado MultiLogin para sequestrar sess\u00f5es de usu\u00e1rios e permitir acesso cont\u00ednuo aos servi\u00e7os do Google, mesmo ap\u00f3s uma redefini\u00e7\u00e3o de senha.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">De acordo com <a href=\"https:\/\/www.cloudsek.com\/blog\/compromising-google-accounts-malwares-exploiting-undocumented-oauth2-functionality-for-session-hijacking\">CloudSEK<\/a>, a explora\u00e7\u00e3o cr\u00edtica facilita a persist\u00eancia da sess\u00e3o e a gera\u00e7\u00e3o de cookies, permitindo que criminosos mantenham o acesso a uma sess\u00e3o v\u00e1lida da v\u00edtima de maneira n\u00e3o autorizada.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A t\u00e9cnica foi revelada pela primeira vez por um ator de amea\u00e7a chamado PRISMA em 20 de outubro de 2023, em seu canal Telegram. Desde ent\u00e3o, ele foi incorporado a v\u00e1rias fam\u00edlias de malwares como servi\u00e7o (MaaS), como Lumma, Rhadamanthys, Stealc, Meduza, RisePro e WhiteSnake.<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"485\" height=\"584\" src=\"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2024\/01\/image.png\" alt=\"\" class=\"wp-image-740\" srcset=\"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2024\/01\/image.png 485w, https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2024\/01\/image-249x300.png 249w\" sizes=\"auto, (max-width: 485px) 100vw, 485px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">O endpoint de autentica\u00e7\u00e3o MultiLogin foi projetado principalmente para sincronizar contas do Google entre servi\u00e7os quando os usu\u00e1rios fazem login em suas contas no navegador Chrome (ou seja, perfis).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Uma engenharia reversa do c\u00f3digo Lumma Stealer revelou que a t\u00e9cnica tem como alvo a \u201ctabela token_service de WebData do Chrome para extrair tokens e IDs de contas de perfis Chrome logados\u201d, disse o pesquisador de seguran\u00e7a Pavan Karthick M. &#8220;Esta tabela cont\u00e9m duas colunas cruciais: servi\u00e7o (ID GAIA) e token_criptografado.&#8221;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Este par token:GAIA ID \u00e9 ent\u00e3o combinado com o endpoint MultiLogin para regenerar cookies de autentica\u00e7\u00e3o do Google.<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter size-full\"><img decoding=\"async\" src=\"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2024\/01\/malware-gmail-2.png\" alt=\"\" class=\"wp-image-736\"\/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Segundo Karthick tr\u00eas cen\u00e1rios diferentes de gera\u00e7\u00e3o de token-cookie foram testados:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Quando o usu\u00e1rio est\u00e1 logado no navegador, nesse caso o token pode ser usado quantas vezes quiser.<\/li>\n\n\n\n<li>Quando o usu\u00e1rio altera a senha, mas permite que o Google permane\u00e7a conectado. Nesse caso, o token s\u00f3 pode ser usado uma vez, pois o token j\u00e1 foi usado uma vez para permitir que o usu\u00e1rio permane\u00e7a conectado.<\/li>\n\n\n\n<li>Se o usu\u00e1rio sair do navegador, o token ser\u00e1 revogado e exclu\u00eddo do armazenamento local do navegador, que ser\u00e1 regenerado ao fazer login novamente.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Quando contactado o Google reconheceu a exist\u00eancia do m\u00e9todo de ataque, mas observou que os usu\u00e1rios podem revogar as sess\u00f5es roubadas efetuando logout do navegador afetado.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cO Google est\u00e1 ciente de relatos recentes de uma fam\u00edlia de malware roubando tokens de sess\u00e3o\u201d, disse a empresa ao The Hacker News. &#8220;Ataques envolvendo malware que roubam cookies e tokens n\u00e3o s\u00e3o novos, atualizamos rotineiramente nossas defesas contra tais t\u00e9cnicas e para proteger os usu\u00e1rios que s\u00e3o v\u00edtimas de malware. Neste caso, o Google tomou medidas para proteger quaisquer contas comprometidas detectadas.&#8221;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cNo entanto, \u00e9 importante observar um equ\u00edvoco nos relat\u00f3rios que sugere que tokens e cookies roubados n\u00e3o podem ser revogados pelo usu\u00e1rio\u201d, acrescentou ainda. &#8220;Isso est\u00e1 incorreto, pois sess\u00f5es roubadas podem ser invalidadas simplesmente saindo do navegador afetado ou revogadas remotamente por meio da p\u00e1gina de dispositivos do usu\u00e1rio. Continuaremos monitorando a situa\u00e7\u00e3o e fornecendo atualiza\u00e7\u00f5es conforme necess\u00e1rio.&#8221;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A empresa recomendou ainda que os usu\u00e1rios ativassem a Navega\u00e7\u00e3o segura aprimorada no Chrome para se protegerem contra downloads de phishing e malware.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201c\u00c9 aconselh\u00e1vel alterar as senhas para que os agentes da amea\u00e7a n\u00e3o utilizem fluxos de autentica\u00e7\u00e3o de redefini\u00e7\u00e3o de senha para restaurar senhas\u201d, disse Karthick. \u201cAl\u00e9m disso, os usu\u00e1rios devem ser aconselhados a monitorar a atividade de suas contas em busca de sess\u00f5es suspeitas provenientes de IPs e locais que eles n\u00e3o reconhecem\u201d.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&#8220;No entanto, o incidente lan\u00e7a luz sobre uma explora\u00e7\u00e3o sofisticada que pode desafiar os m\u00e9todos tradicionais de prote\u00e7\u00e3o de contas. Embora as medidas do Google sejam valiosas, esta situa\u00e7\u00e3o destaca a necessidade de solu\u00e7\u00f5es de seguran\u00e7a mais avan\u00e7adas para combater as amea\u00e7as cibern\u00e9ticas em evolu\u00e7\u00e3o, como no caso dos infostealers que s\u00e3o tremendamente populares entre os cibercriminosos atualmente.&#8221;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Para acessar seus dispositivos conectados e autenticados voc\u00ea pode utilizar o link a seguir: <a href=\"https:\/\/myaccount.google.com\/device-activity\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/myaccount.google.com\/device-activity<\/a><\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\">IOC&#8217;s C2 Infrastructure<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">144.76.173.247<br>45.9.74.78<br>77.73.134.68<br>82.117.255.127<br>82.117.255.80<br>82.118.23.50<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Novo malware da familia Information stealing est\u00e1 explorando um endpoint OAuth do Google n\u00e3o documentado chamado MultiLogin para sequestrar sess\u00f5es [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":737,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[78],"tags":[],"class_list":["post-735","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-malware"],"yoast_head":"<title>Malware explora Google MultiLogin para manter o acesso ap\u00f3s redefini\u00e7\u00e3o de senha - Tech Security<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/techsecurity.com.br\/2024\/01\/malware-explora-google-multilogin-para-manter-o-acesso-apos-redefinicao-de-senha\/\" \/>\n<meta property=\"og:locale\" content=\"pt_BR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Malware explora Google MultiLogin para manter o acesso ap\u00f3s redefini\u00e7\u00e3o de senha - Tech Security\" \/>\n<meta property=\"og:description\" content=\"Novo malware da familia Information stealing est\u00e1 explorando um endpoint OAuth do Google n\u00e3o documentado chamado MultiLogin para sequestrar sess\u00f5es [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/techsecurity.com.br\/2024\/01\/malware-explora-google-multilogin-para-manter-o-acesso-apos-redefinicao-de-senha\/\" \/>\n<meta property=\"og:site_name\" content=\"Tech Security\" \/>\n<meta property=\"article:published_time\" content=\"2024-01-04T20:42:52+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-01-04T20:50:27+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2024\/01\/malware-gmail-1.png\" \/>\n\t<meta property=\"og:image:width\" content=\"762\" \/>\n\t<meta property=\"og:image:height\" content=\"427\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"redator\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"redator\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. tempo de leitura\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2024\\\/01\\\/malware-explora-google-multilogin-para-manter-o-acesso-apos-redefinicao-de-senha\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2024\\\/01\\\/malware-explora-google-multilogin-para-manter-o-acesso-apos-redefinicao-de-senha\\\/\"},\"author\":{\"name\":\"redator\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#\\\/schema\\\/person\\\/cbf56a9c02423f4f6f5bbfad3e3f95f6\"},\"headline\":\"Malware explora Google MultiLogin para manter o acesso ap\u00f3s redefini\u00e7\u00e3o de senha\",\"datePublished\":\"2024-01-04T20:42:52+00:00\",\"dateModified\":\"2024-01-04T20:50:27+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2024\\\/01\\\/malware-explora-google-multilogin-para-manter-o-acesso-apos-redefinicao-de-senha\\\/\"},\"wordCount\":705,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2024\\\/01\\\/malware-explora-google-multilogin-para-manter-o-acesso-apos-redefinicao-de-senha\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/techsecurity.com.br\\\/%77%70%2d%63%6f%6e%74%65%6e%74\\\/uploads\\\/2024\\\/01\\\/malware-gmail-1.png\",\"articleSection\":[\"Malware\"],\"inLanguage\":\"pt-BR\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/techsecurity.com.br\\\/2024\\\/01\\\/malware-explora-google-multilogin-para-manter-o-acesso-apos-redefinicao-de-senha\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2024\\\/01\\\/malware-explora-google-multilogin-para-manter-o-acesso-apos-redefinicao-de-senha\\\/\",\"url\":\"https:\\\/\\\/techsecurity.com.br\\\/2024\\\/01\\\/malware-explora-google-multilogin-para-manter-o-acesso-apos-redefinicao-de-senha\\\/\",\"name\":\"Malware explora Google MultiLogin para manter o acesso ap\u00f3s redefini\u00e7\u00e3o de senha - Tech Security\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2024\\\/01\\\/malware-explora-google-multilogin-para-manter-o-acesso-apos-redefinicao-de-senha\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2024\\\/01\\\/malware-explora-google-multilogin-para-manter-o-acesso-apos-redefinicao-de-senha\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/techsecurity.com.br\\\/%77%70%2d%63%6f%6e%74%65%6e%74\\\/uploads\\\/2024\\\/01\\\/malware-gmail-1.png\",\"datePublished\":\"2024-01-04T20:42:52+00:00\",\"dateModified\":\"2024-01-04T20:50:27+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2024\\\/01\\\/malware-explora-google-multilogin-para-manter-o-acesso-apos-redefinicao-de-senha\\\/#breadcrumb\"},\"inLanguage\":\"pt-BR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/techsecurity.com.br\\\/2024\\\/01\\\/malware-explora-google-multilogin-para-manter-o-acesso-apos-redefinicao-de-senha\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2024\\\/01\\\/malware-explora-google-multilogin-para-manter-o-acesso-apos-redefinicao-de-senha\\\/#primaryimage\",\"url\":\"https:\\\/\\\/techsecurity.com.br\\\/%77%70%2d%63%6f%6e%74%65%6e%74\\\/uploads\\\/2024\\\/01\\\/malware-gmail-1.png\",\"contentUrl\":\"https:\\\/\\\/techsecurity.com.br\\\/%77%70%2d%63%6f%6e%74%65%6e%74\\\/uploads\\\/2024\\\/01\\\/malware-gmail-1.png\",\"width\":762,\"height\":427},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2024\\\/01\\\/malware-explora-google-multilogin-para-manter-o-acesso-apos-redefinicao-de-senha\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"In\u00edcio\",\"item\":\"https:\\\/\\\/techsecurity.com.br\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Malware explora Google MultiLogin para manter o acesso ap\u00f3s redefini\u00e7\u00e3o de senha\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#website\",\"url\":\"https:\\\/\\\/techsecurity.com.br\\\/\",\"name\":\"Tech Security\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/techsecurity.com.br\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"pt-BR\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#organization\",\"name\":\"Tech Security\",\"url\":\"https:\\\/\\\/techsecurity.com.br\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/techsecurity.com.br\\\/%77%70%2d%63%6f%6e%74%65%6e%74\\\/uploads\\\/2023\\\/01\\\/Captura-de-tela-2023-01-26-092032-e1674773223849.png\",\"contentUrl\":\"https:\\\/\\\/techsecurity.com.br\\\/%77%70%2d%63%6f%6e%74%65%6e%74\\\/uploads\\\/2023\\\/01\\\/Captura-de-tela-2023-01-26-092032-e1674773223849.png\",\"width\":100,\"height\":89,\"caption\":\"Tech Security\"},\"image\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#\\\/schema\\\/person\\\/cbf56a9c02423f4f6f5bbfad3e3f95f6\",\"name\":\"redator\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2b5d74aab819768fb979a436035e63bba126d07ac7df0bcd0d4f5e8e0ffb45a5?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2b5d74aab819768fb979a436035e63bba126d07ac7df0bcd0d4f5e8e0ffb45a5?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2b5d74aab819768fb979a436035e63bba126d07ac7df0bcd0d4f5e8e0ffb45a5?s=96&d=mm&r=g\",\"caption\":\"redator\"},\"url\":\"https:\\\/\\\/techsecurity.com.br\\\/author\\\/redator\\\/\"}]}<\/script>","yoast_head_json":{"title":"Malware explora Google MultiLogin para manter o acesso ap\u00f3s redefini\u00e7\u00e3o de senha - Tech Security","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/techsecurity.com.br\/2024\/01\/malware-explora-google-multilogin-para-manter-o-acesso-apos-redefinicao-de-senha\/","og_locale":"pt_BR","og_type":"article","og_title":"Malware explora Google MultiLogin para manter o acesso ap\u00f3s redefini\u00e7\u00e3o de senha - Tech Security","og_description":"Novo malware da familia Information stealing est\u00e1 explorando um endpoint OAuth do Google n\u00e3o documentado chamado MultiLogin para sequestrar sess\u00f5es [&hellip;]","og_url":"https:\/\/techsecurity.com.br\/2024\/01\/malware-explora-google-multilogin-para-manter-o-acesso-apos-redefinicao-de-senha\/","og_site_name":"Tech Security","article_published_time":"2024-01-04T20:42:52+00:00","article_modified_time":"2024-01-04T20:50:27+00:00","og_image":[{"width":762,"height":427,"url":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2024\/01\/malware-gmail-1.png","type":"image\/png"}],"author":"redator","twitter_card":"summary_large_image","twitter_misc":{"Escrito por":"redator","Est. tempo de leitura":"4 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/techsecurity.com.br\/2024\/01\/malware-explora-google-multilogin-para-manter-o-acesso-apos-redefinicao-de-senha\/#article","isPartOf":{"@id":"https:\/\/techsecurity.com.br\/2024\/01\/malware-explora-google-multilogin-para-manter-o-acesso-apos-redefinicao-de-senha\/"},"author":{"name":"redator","@id":"https:\/\/techsecurity.com.br\/#\/schema\/person\/cbf56a9c02423f4f6f5bbfad3e3f95f6"},"headline":"Malware explora Google MultiLogin para manter o acesso ap\u00f3s redefini\u00e7\u00e3o de senha","datePublished":"2024-01-04T20:42:52+00:00","dateModified":"2024-01-04T20:50:27+00:00","mainEntityOfPage":{"@id":"https:\/\/techsecurity.com.br\/2024\/01\/malware-explora-google-multilogin-para-manter-o-acesso-apos-redefinicao-de-senha\/"},"wordCount":705,"commentCount":0,"publisher":{"@id":"https:\/\/techsecurity.com.br\/#organization"},"image":{"@id":"https:\/\/techsecurity.com.br\/2024\/01\/malware-explora-google-multilogin-para-manter-o-acesso-apos-redefinicao-de-senha\/#primaryimage"},"thumbnailUrl":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2024\/01\/malware-gmail-1.png","articleSection":["Malware"],"inLanguage":"pt-BR","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/techsecurity.com.br\/2024\/01\/malware-explora-google-multilogin-para-manter-o-acesso-apos-redefinicao-de-senha\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/techsecurity.com.br\/2024\/01\/malware-explora-google-multilogin-para-manter-o-acesso-apos-redefinicao-de-senha\/","url":"https:\/\/techsecurity.com.br\/2024\/01\/malware-explora-google-multilogin-para-manter-o-acesso-apos-redefinicao-de-senha\/","name":"Malware explora Google MultiLogin para manter o acesso ap\u00f3s redefini\u00e7\u00e3o de senha - Tech Security","isPartOf":{"@id":"https:\/\/techsecurity.com.br\/#website"},"primaryImageOfPage":{"@id":"https:\/\/techsecurity.com.br\/2024\/01\/malware-explora-google-multilogin-para-manter-o-acesso-apos-redefinicao-de-senha\/#primaryimage"},"image":{"@id":"https:\/\/techsecurity.com.br\/2024\/01\/malware-explora-google-multilogin-para-manter-o-acesso-apos-redefinicao-de-senha\/#primaryimage"},"thumbnailUrl":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2024\/01\/malware-gmail-1.png","datePublished":"2024-01-04T20:42:52+00:00","dateModified":"2024-01-04T20:50:27+00:00","breadcrumb":{"@id":"https:\/\/techsecurity.com.br\/2024\/01\/malware-explora-google-multilogin-para-manter-o-acesso-apos-redefinicao-de-senha\/#breadcrumb"},"inLanguage":"pt-BR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/techsecurity.com.br\/2024\/01\/malware-explora-google-multilogin-para-manter-o-acesso-apos-redefinicao-de-senha\/"]}]},{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/techsecurity.com.br\/2024\/01\/malware-explora-google-multilogin-para-manter-o-acesso-apos-redefinicao-de-senha\/#primaryimage","url":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2024\/01\/malware-gmail-1.png","contentUrl":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2024\/01\/malware-gmail-1.png","width":762,"height":427},{"@type":"BreadcrumbList","@id":"https:\/\/techsecurity.com.br\/2024\/01\/malware-explora-google-multilogin-para-manter-o-acesso-apos-redefinicao-de-senha\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"In\u00edcio","item":"https:\/\/techsecurity.com.br\/"},{"@type":"ListItem","position":2,"name":"Malware explora Google MultiLogin para manter o acesso ap\u00f3s redefini\u00e7\u00e3o de senha"}]},{"@type":"WebSite","@id":"https:\/\/techsecurity.com.br\/#website","url":"https:\/\/techsecurity.com.br\/","name":"Tech Security","description":"","publisher":{"@id":"https:\/\/techsecurity.com.br\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/techsecurity.com.br\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"pt-BR"},{"@type":"Organization","@id":"https:\/\/techsecurity.com.br\/#organization","name":"Tech Security","url":"https:\/\/techsecurity.com.br\/","logo":{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/techsecurity.com.br\/#\/schema\/logo\/image\/","url":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/01\/Captura-de-tela-2023-01-26-092032-e1674773223849.png","contentUrl":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/01\/Captura-de-tela-2023-01-26-092032-e1674773223849.png","width":100,"height":89,"caption":"Tech Security"},"image":{"@id":"https:\/\/techsecurity.com.br\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/techsecurity.com.br\/#\/schema\/person\/cbf56a9c02423f4f6f5bbfad3e3f95f6","name":"redator","image":{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/secure.gravatar.com\/avatar\/2b5d74aab819768fb979a436035e63bba126d07ac7df0bcd0d4f5e8e0ffb45a5?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/2b5d74aab819768fb979a436035e63bba126d07ac7df0bcd0d4f5e8e0ffb45a5?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/2b5d74aab819768fb979a436035e63bba126d07ac7df0bcd0d4f5e8e0ffb45a5?s=96&d=mm&r=g","caption":"redator"},"url":"https:\/\/techsecurity.com.br\/author\/redator\/"}]}},"wps_subtitle":"","_links":{"self":[{"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/posts\/735","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/comments?post=735"}],"version-history":[{"count":4,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/posts\/735\/revisions"}],"predecessor-version":[{"id":744,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/posts\/735\/revisions\/744"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/media\/737"}],"wp:attachment":[{"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/media?parent=735"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/categories?post=735"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/tags?post=735"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}