This would be a better link; the blog post on which the Bleeping Computer article is primarily based. They refer to it but never link to it: https://www.clouds

This would be a better link; the blog post on which the Bleeping Computer article is primarily based. They refer to it but never link to it: https://www.cloudsek.com/blog/compromising-google-accounts-malwares-exploiting-undocumented-oauth2-functionality-for-session-hijacking https://www.cloudsek.com/blog/compromising-google-accounts-m...