The Hacker News

JSCeal Malware Can Bypass Google Authentication Using Stolen Session Cookies

MalwareHighcredential harvesting

JSCeal, a sophisticated JavaScript malware, can steal session cookies to bypass Google Authentication and conduct surveillance. It features credential harvesting, traffic interception, and multiple obfuscation techniques. This poses significant risk to email users and organizations relying on email-based authentication.

AI summary · generated with Claude

https://thehackernews.com/2026/09/jsceal-malware-can-bypass-google.html