Google Malware Threat: Hackers Leverage Trusted Domains to Bypass Security

A sophisticated malware campaign has emerged, utilizing legitimate Google URLs to evade antivirus software. This subtle attack method exploits OAuth-related URLs, embedding malicious scripts that only activate during checkout processes, making them nearly undetectable. The malware opens a WebSocket connection for live control, allowing attackers to manipulate user browser sessions unseen. Originating from compromised ecommerce sites, the malware is linked to manipulated Google OAuth logout URLs. This threat highlights the evolving tactics of cybercriminals, who are increasingly leveraging trusted platforms to bypass security filters. To protect against such threats, users must remain vigilant about suspicious URLs and learn to recognize signs of compromised websites.