Google warns users to protect their inbox from Remus Stealer malware

Key Points:

• A new cybercrime tool called Remus Stealer targets Gmail users by allowing hackers to access private email inboxes even after passwords are changed or browsers are closed, according to cybersecurity firm Hudson Rock.
• Remus Stealer is marketed on online forums for $1,000 per month, providing criminals with a control panel to view, search, and share complete Gmail mailbox contents, including sender details and timestamps.
• The malware reportedly intercepts verification codes from third-party services without relying on browser cookies, enabling ongoing unauthorized access despite password updates and session revocations.
• Google recommends users update passwords, remove malware, revoke active sessions, and review account settings such as forwarding rules, filters, recovery options, and third-party app permissions to mitigate risks.
• Researchers caution that while password changes are necessary, they are insufficient alone, and additional security measures should be implemented to protect against this evolving threat.