JSCeal

JSCeal Malware Bypasses Google Authentication via Stolen Session Cookies

Researchers from Check Point have uncovered JSCeal, a compiled V8 JavaScript malware capable of credential harvesting, surveillance, and traffic interception. The malware uses obfuscation techniques to bypass security controls and can reuse stolen session cookies to circumvent Google authentication, including multi-factor authentication protections.