@socket.dev Fake PDF verifier steals Google session cookies and can reset passwords. - IOCs: pdf[.]gusercontent[.]com, pdf[.]gusercontent[.]com/api/accounts/collect/, pdf-para-texto@extensao[.]local - #AccountTakeover #Malware #ThreatIntel
socket.devMalicious Firefox Extension Hijacks Google Accounts
1 repost1 like