Changing your passwords is no longer enough to avoid this new cyberattack tool.
Gmail users should review their account security settings following reports of a new cybercrime tool designed to target private inboxes.
The software, known as Remus Stealer, was touted on online forums as a tool for hackers to get their hands on unauthorized access to people’s personal emails, according to Hudson Rock, a cybersecurity firm that investigated Remus Stealer.
The operators of the Remus Stealer malware are marketing a new feature that allows criminals to access victims’ Gmail inboxes directly from a control panel, according to reports from Cyber Insider. The software’s developers say cybercriminals can maintain access to messages even after users change their Google password or close their web browser.
According to Hudson Rock, Remus Stealer claims that criminals who subscribe to their service – for $1,000 per month – will have access to Gmail’s private inboxes.
Infostealer malware is designed to collect sensitive data, such as passwords and login credentials, from infected devices. These infections usually occur via downloads, disguised as legitimate software, although the exact method used by Remus has not been confirmed.
Hudson Rock reviewed the version 1.3.9 announcement, contacted the developer, and spoke with an individual who publicly endorsed the feature to learn more about the hacking software.
A Remus user reported to Hudson Rock that compromised email access persisted for the hacker even after the user closed their browser and updated their account password.
The source also told Hudson Rock that verification codes from third-party online services could be intercepted through the app. Remus promotes interception of email code without collecting browser cookie files, claims that password changes and session revocation don’t stop it, and advertises shareable mailbox links.
However, researchers have not independently verified whether ongoing message collection continues once an account is fully secured and active sessions are revoked.
Other online accounts may also be vulnerable, as unauthorized access to email may allow individuals to receive password reset links and verification codes.
For a monthly fee of $1,000, hackers are given a central dashboard to view email data and share access with other hackers.
Hudson Rock cybersecurity researchers reviewed the tool’s promotional materials and noted that while updating passwords is a necessary precaution, additional security measures should be taken.
UI images show options to search email content, sender details and timestamps, indicating access to entire mailboxes rather than single codes.
Google recommends users update their passwords and end unrecognized sessions. “Users can invalidate stolen sessions by removing malware from the affected device and revoking active sessions,” a Google spokesperson told Cybernews.
Researchers advise users to check account settings, including transfer rules, filters, recovery options, and third-party app permissions, to ensure that no unauthorized changes have taken place.
The Post contacted Hudson Rock and they did not immediately respond for comment.
Gn tech
