"Protect Your Google Account: Expert Tips to Thwart MultiLogin Vulnerabilities and Malware Attacks"
Originally Published 2 years ago — by Forbes
Google has advised Gmail users to sign out and back in to invalidate session tokens after a password change-resistant hack was discovered. Attackers exploited an undocumented authentication endpoint to maintain access to Google accounts by restoring expired session cookies. Despite the persistence of the exploit, Google asserts that stolen sessions can be invalidated and recommends users enable Enhanced Safe Browsing in Chrome for additional protection. The company has taken steps to secure compromised accounts and suggests that resetting passwords and signing out of all browser profiles can help prevent unauthorized access.