New Gmail Cyber Attack Confirmed— Encryption Key Hackers Strike

Quick Summary:

Gmail is such a well-known and trusted email service that “these exfiltration attempts are less likely to be flagged by firewalls or endpoint detection systems,” the report said, because they treat smtp.gmail.com as being legitimate traffic.

The attack code can handle multiple private keys simultaneously, the report said, allowing an attacker to compromise multiple user accounts or environments at once, with the discovered keys being exfiltrated to hacker-controlled Gmail addresses, which I won’t publish here but are accessible in the report itself.

The researchers said that, at the time of the report publication, the malicious packages remained live and available for download but they had petitioned for their removal.“We also reported two GitHub repositories,” Boychenko said, “used by the threat actor…to amplify the malware campaign and lend legitimacy to these malicious packages.” I have reached out to GitHub for a statement.

---

More Pictures

---

Read Quick SummarySave Time

or

Article Details

Author / Journalist: Davey Winder, Senior Contributor

Category: StartupsTechnology

Markets: United StatesMali

Topics: Consumer Tech Innovation /innovation /cybersecurity Innovation Cybersecurity /consumer-tech Standard

Source Website Secure: Yes (HTTPS)

News Sentiment: Negative

Fact Checked: Legitimate

Article Type: News Report

Published On: 2025-01-12 @ 06:06:08 (16 hours ago)

News Timezone: GMT -5:00

News Source URL: forbes.com

Language: English

Article Length: 24 words

Reading Time: 1 minutes read

Sentences: 27 lines

Sentence Length: 1 words per sentence (average)

Platforms: Desktop Web, Mobile Web, iOS App, Android App

Copyright Owner: © Forbes

News ID: 25078983

View Article Analysis

About Forbes

Main Topics: StartupsTechnology

Official Website: forbes.com

Update Frequency: 15 posts per day

Year Established: 1917

Headquarters: United States

News Last Updated: 13 hours ago

Coverage Areas: United States

Ownership: Independent Company

Publication Timezone: GMT -5:00

Content Availability: Worldwide

News Language: English

RSS Feed: Available (XML)

API Access: Available (JSON, REST)

Website Security: Secure (HTTPS)

Publisher ID: #40

Publisher Details

Frequently Asked Questions