Gmail users are advised to check their account safety settings after reporting on a new cybercrime tool, which is designed to directly target private email boxes.
The software, known as Remus Stealer, has been promoted to online forums as a means to enable hackers to provide unauthorized access to personal user emails, according to the cyber security company Hudson Rock, which has investigated its operation.
Operators of the malicious Remus Stealer program are promoting a new function through which cyber criminals can access the victims’ Gmail boxes directly through a control panel, reports Cyber Insiver.
Software developers claim hackers can continue accessing the victims’ messages even after they change the Google account password or close the web browser.
According to Hudson Rock, Remus Stealer offers cybercriminals access to Gmail’s private boxes through a subscription that costs $1,000 a month.
The malicious programs known as Infostealer are designed to collect sensitive data from infected devices, including passwords and key credentials in the account. Such infections usually occur through the dismissal of programs that are disguised as legitimate software, although the exact way Remus Stealer works has not yet been confirmed.
Hudson Rock has reviewed the announcement of the 1.3.9 version of this programme, contacted its developer and talked to a person who had publicly supported this post in an effort to understand more about the hacker’s tool.
A Remus Stealer user reported to Hudson Rock that the hacker had continued access to compromised email even after the user closed the browser and changed the account password.
The same source has stated that through this app the verification codes from other online services can be traced. Remus promotes the access to codes sent via email, without the need to collect cookie files (cookies) of the browser.
According to developers’ claims, changing password and closing active sessions do not disrupt this approach. The programme also promotes the possibility of creating links through which mailboxes can be distributed to others.
However, researchers have not yet managed to verify independently whether the collection of messages continues even after the account is fully secured and all active sessions are interrupted.
Other online accounts may also be at risk, as unauthorized access to email may enable hackers to accept links to restore passwords and verification codes for various services.
For monthly subscription of $1000, hackers get a central control panel where they can look at email data and share access with other hackers.
Cyber security researchers at Hudson Rock have analyzed the promotional materials of this device and have stressed that although password change is a necessary precautionary measure, users must take other steps to protect their accounts.
Program interface images show that it offers access to email content research, sender details and message acceptance time. This suggests that hackers can access the entire mailbox and not just the separate verification codes.
Google recommends that users change passwords and abort sessions they do not know about.
Users can mistake stolen sessions by removing the malicious program from the affected device and interrupting active sessions, a Google spokesman for Cybernews has declared.
Meanwhile, researchers advise users to carefully check their account settings, including email delivery rules, filters, account recovery options, and third-party app permits, to ensure that unauthorized changes have not been made.
The signal where the truth speaks before the news!
Source Layer: Signal
