Reply to thread

Message

<blockquote data-quote="TairikuOkami" data-source="post: 1112923" data-attributes="member: 61892">1. Yes, especially when using login with Google or MS, because you are still logged into the browser or the account.MS does not even allow to simply log out, MS only offers the nuke option: Sign out everywhere, which is unusable.Google is more intertwined, no wonder many users got their 2FA verified accounts stolen, like Linus Tech Tips.Passkey literally rendered cookie hijacking outdated, passkey renders 2FA and the whole security useless.2. Not really, the attack happens outside the PC, either by clicking on a malicious link or simply visiting a legitimate webpage via malvertising.Hackers use normal scripts, webapps and API. They are just taking the advantage of technology designed to make everything simpler, like AI.[URL unfurl=&quot;true&quot;]https://www.bleepingcomputer.com/news/security/google-malware-abusing-api-is-standard-token-theft-not-an-api-issue/[/URL]</blockquote>

[QUOTE="TairikuOkami, post: 1112923, member: 61892"] 1. Yes, especially when using login with Google or MS, because you are still logged into the browser or the account. MS does not even allow to simply log out, MS only offers the nuke option: Sign out everywhere, which is unusable. Google is more intertwined, no wonder many users got their 2FA verified accounts stolen, like Linus Tech Tips. Passkey literally rendered cookie hijacking outdated, passkey renders 2FA and the whole security useless. 2. Not really, the attack happens outside the PC, either by clicking on a malicious link or simply visiting a legitimate webpage via malvertising. Hackers use normal scripts, webapps and API. They are just taking the advantage of technology designed to make everything simpler, like AI. [URL unfurl="true"]https://www.bleepingcomputer.com/news/security/google-malware-abusing-api-is-standard-token-theft-not-an-api-issue/[/URL] [/QUOTE]

Verification