The advanced persistent threat (APT) group known as ToddyCat has expanded its cyber-espionage capabilities with a new .NET-based malware called Umbrij, designed to automate the compromise of Gmail accounts. Unlike traditional credential theft attacks, the malware abuses Google’s OAuth authorization process to obtain access tokens, allowing attackers to access corporate email accounts without stealing passwords. […]
The post ToddyCat APT Automates Gmail Account Compromise With ConfuserEx-Obfuscated .NET Tool appeared first on Cyber Security News.