Google races to fix bug that lets hackers silently enter your account – two checks to make immediately
GOOGLE has been scrambling to fix a critical security flaw that could allow hackers to infiltrate your Google account.
The vulnerability was discovered by security researchers at CloudSEK and Hudson Rock.
It exploits a weakness in how Google handles cookies – pieces of data that websites store on your browser.
Cookies are the reason your web browser can remember your passwords and what you do on websites.
However, these cookies can also be exploited by threat actors to disseminate malware.
Malware is a malicious file or code that can infect your smartphone, desktop, or laptop.
This software can, in turn, give hackers access to your personal information and banking details.
While Google Chrome has been cracking down on third-party cookies, this flaw leaves Google accounts open to hackers.
Experts said, even if you change your passwords, malware groups can still the vulnerability.
Experts from 9to5Google explained further: “The dangers of such misuse are significant because these cookies bypass passwords and two-factor authentication typically used to secure Google accounts.
This means hackers can sign in to accounts even if the real user resets their password or signs out.”
HOW TO STAY SAFE
For starters, it’s important to always keep your device updated with the latest software.
Clear your browser cookies and cache to remove any potentially malicious cookies that may be lurking on your device.
You should never download anything from strange pop-up windows or suspicious-looking websites.
It’s also important to install an antivirus and antimalware on your device so it can scan for any problems.
Enabling two-factor authentication (2FA) also adds an extra layer of security by requiring a second code for accounts.