MultiLogin is a Chromium feature that can be abused to compromise a user’s Google account.

The “bug” was unveiled by a malware developer known as PRISMA in October 2023.

CloudSEK said that the MultiLogin exploit underscores the “complexity and stealth” of modern security threats.

Google OAuth secrets exposed as account-hijacking MultiLogin vulnerability discovered

Googleconfirmedthe session-stealing attack, saying that such kind of malware is not new.