# Google accounts can be accessed without passwords! Hackers can acquire control via cookies; know how | How-to (HT Tech) > Hackers have found a way to access Google accounts without passwords via the humble cookies! # Google accounts can be accessed without passwords! Hackers can acquire control via cookies, know how ## Hackers have found a way to access Google accounts without passwords via the humble cookies! Jan 07 2024, 00:04 IST ![Follow on Facebook](https://images.hindustantimes.com/tech/static/revamp/images/png/follow-us-facebook.png) ![Follow on Facebook](https://images.hindustantimes.com/tech/static/revamp/images/png/follow-us-facebook-hover.png) ![Share](https://images.hindustantimes.com/tech/static/revamp/images/png/Share.png) ![Share](https://images.hindustantimes.com/tech/static/revamp/images/png/Shareclicked.png) ![Share on WhatsApp](https://images.hindustantimes.com/tech/static/revamp/images/png/whatsapp.png) ![Share on WhatsApp](https://images.hindustantimes.com/tech/static/revamp/images/png/whatsapp-hover.png) ![Share on Twitter](https://images.hindustantimes.com/tech/static/revamp/images/png/twitter.png) ![Share on Twitter](https://images.hindustantimes.com/tech/static/revamp/images/png/twitter-hover.png) ![Share on Facebook](https://images.hindustantimes.com/tech/static/revamp/images/png/facebook.png) ![Share on Facebook](https://images.hindustantimes.com/tech/static/revamp/images/png/facebook-hover.png) ![Bookmark](https://images.hindustantimes.com/tech/static/revamp/images/png/Bookmark.png) ![Bookmarked](https://images.hindustantimes.com/tech/static/revamp/images/png/Bookmarked.png) ![Google account](https://images.hindustantimes.com/tech/img/2024/01/06/1600x900/FILES-GOOGLE-LAWSUIT-PRIVACY-DATA-0_1704564378565_1704564408825.jpg) ![icon](https://images.hindustantimes.com/tech/static/revamp/images/png/imageviewall.png) So, is your Google account safe from hackers? Cookies have been used by hackers to compromise Google accounts. (AFP) ![Author Photo](https://images.hindustantimes.com/tech/static/revamp/images/png/HTTech-new-circle-logo.png) ### By HT TECH Google accounts are considered safe if the password is strong enough. Well, that is old news, at least that is what this new report is saying. According to CloudSek, hackers have found a way to access Google accounts without passwords! So, is your Google account safe from hackers? The report says that hackers have used a form of malware that utilises third-party cookies to illegally enter users' Google accounts and they have free run on whatever data that it has. In effect, the potential to compromise private and professional lives of millions of users is very much there. ## Compromised by Cookies What is even more surprising is the fact that it was not revealed by any security agency or corporation, rather, it was outed by a hacker when he posted about it on a Telegram channel boasting about the exploit in October 2023. The Telegram post even indicated the method used - cookies. ## What are cookies? According to Google, these are small pieces of text sent to users' web browser by any website they visit. Cookies help that website remember information about their visit, which can both make it easier to visit the site again and make the site more useful to the users. We are now on WhatsApp. Click to join. ## How hackers did it The job of cookies is to make users' life easier, as explained above, but in this instance, they were used for hacking purposes. In fact, hackers devised a method to hijack these cookies and circumvent the security features present, including 2-factor authentication. ## What Google is doing about it The Tech giant is reportedly working on a solution to ensure that the breach is sealed permanently and the Google Chrome browser security is up and running. “We routinely upgrade our defences against such techniques and to secure users who fall victim to malware. In this instance, Google has taken action to secure any compromised accounts detected,” a report by the Independent quoted Google as saying. "In this instance, Google has taken action to secure any compromised accounts detected,” Google added. ## What you can do about it While for Google, keeping hackers at bay is a daily exercise, users can do something about it too to ensure they stop cybercriminals from accessing their private data. The most important thing for users to do is ensure there is an effective anti-virus software on their device and to daily check if malware has infiltrated it and if found, to remove it. Google recommends turning on Enhanced Safe Browsing in Chrome to protect against phishing and malware downloads. ## What CloudSek recommends: In its report, CloudSek says, “While we await a comprehensive solution from Google, users can take immediate action to safeguard against this exploit. If you suspect your account may have been compromised, or as a general precaution, sign out of all browser profiles to invalidate the current session tokens. Following this, reset your password and sign back in to generate new tokens.” It added, “Resetting your password effectively disrupts unauthorized access by invalidating the old tokens which the infostealers rely on, thus providing a crucial barrier to the continuation of their exploit.” ## What Google generally recommends: In case you want to secure a hacked or compromised Google Account, you can get back into your account, and make it more secure. Step 1: Try to sign in to your Google Account. And if you cannot, go to the account recovery page, and answer the questions as best you can to try and recover control of your account. I. When should you use the account recovery page if: - Someone changed your account info, like your password or recovery phone number. - Someone deleted your account. - You can’t sign in for another reason. Also read click here. II. What more can you do to find out if you have been hacked? - Go to your Google Account. - On the left navigation panel, select Security. - On the "Recent security events" panel, select Review security events. - Check for any suspicious activity: If someone other than you had accessed your Google account - “Select No, it wasn’t me." Thereafter, follow the steps on the screen to help secure your account. ## CloudSek provided the Timeline of events: October 20, 2023: The exploit is first revealed on a Telegram channel. (Figure 1) November 14, 2023: Lumma announces the feature's integration with an advanced blackboxing approach. The feature started Booming because of the Security Field posting about Lumma’s unique feature. (Appendix 1) Rhadamanthys Nov 17: Rhadamanthys announces the feature with similar blackboxing approach as Lumma (Appendix 6) November 24, 2023: Lumma updates the exploit to counteract Google's fraud detection measures. (Appendix 7) Stealc Dec 1 , 2023 - Implemented the google account token restore feature (Appendix 4) Meduza Dec 11, 2023 - Implemented the google account token restore feature (Appendix 5) RisePro Dec 12, 2023 - Implemented the google account token restore feature (Appendix 3) WhiteSnake Dec 26, 2023 - Implemented the google account token restore feature (Appendix 2) Dec 27, 2023 - Hudson Rock posts video from Darkweb where a hacker shows exploiting the generated cookies ## Also, read these top stories today: ## CES 2024 coming! Sam Altman may not attend CES 2024, but that does not mean it will be short of movers and shakers. The generative AI fever Altman's startup set off last year will be on full display as gadget makers race to find consumer uses for the technology. Some interesting details in this article. Check it out here. ## Big Tech Breakthrough by China? A new laptop by Huawei has set alarm bells ringing of a new chip breakthrough by China. Know the truth here. If you enjoyed reading this article, please forward it to your friends and family. ## Setback for YouTube over employees! The court just sided with the staff. Jump in here. Found it interesting? Go on, and share it with everyone you know. One more thing! HT Tech is now on WhatsApp Channels! Follow us there so you never miss any update from the world of technology. ‎To follow the HT Tech channel on WhatsApp, click here to join now! Catch all the Latest Tech News, Mobile News, Laptop News, Gaming news, Wearables News , How To News, also keep up with us on Whatsapp channel,Twitter, Facebook, Google News, and Instagram. For our latest videos, subscribe to our YouTube channel. 06 Jan, 23:40 IST google ![HT Tech Awards](https://tech.hindustantimes.com/ht-tech-power-list-awards-2026/httech-awards-banner-new.webp) ### Related Stories 07 Oct 2026 71,704,564,060,819 NEXT ARTICLE BEGINS ![View all](https://images.hindustantimes.com/tech/static/revamp/images/png/view-all-icon.png) ## Tips & Tricks ![Ghibli-style art](https://images.hindustantimes.com/tech/img/2025/03/28/414x233/ChatGPT_Ghibli_style_images_1743161814450_1743161814596.jpg) ### How to turn your photos into Ghibli-style art with ChatGPT for free: Step-by-step guide ![How to create an invitation using iPhone’s new Apple Invites app- Step-by-step guide](https://images.hindustantimes.com/tech/img/2025/02/14/414x233/invites_1738728829564_1739543695649.png) ### How to create an invitation using iPhone’s new Apple Invites app- Step-by-step guide ![Apple TV app arrives on Android phones and tablets: What you get and how to install it](https://images.hindustantimes.com/tech/img/2025/02/13/414x233/unnamed_1739426557335_1739426567634.jpg) ### Apple TV app arrives on Android phones and tablets: What you get and how to install it ![Vodafone Idea OTT plans](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png) ### Vodafone Idea users can now stream 17 OTT apps with one subscription: Here's how ![Android data transfer methods](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png) ### How to transfer data from one Android to another using Google backup, USB-C cable, and more ## Editor’s Pick ![iPhone 16e launched with A18 chip, Apple AI—bringing flagship power on a budget: Check specs, price](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png) ### iPhone 16e launched in India: All details about the new budget mobile from Apple ![DeepSeek was founded in China with only a fraction of the budget of the top AI companies in the US.](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png) ### DeepSeek AI: How it works, who’s behind it, how it’s different from ChatGPT, and its big US market impact explained ![iPhone 17 Air likely to get this feature that iPhone 17 Pro models may miss out on](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png) ### iPhone 17 Air likely to get this feature that iPhone 17 Pro models may miss out on ![Google Whisk AI explained: How remixing works, availability, and how it differs from Gemini](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png) ### Google Whisk AI explained: How remixing works, availability, and how it differs from Gemini ![iOS 18.4 beta arriving soon: Know why it is the biggest iPhone update](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png) ### iOS 18.4 beta arriving soon: Know why it is the biggest iPhone update ## Trending Stories ![Airtel 5G SIM card will now be delivered in 10 minutes with Blinkit- How to order](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png) ### Airtel 5G SIM card will now be delivered in 10 minutes with Blinkit- How to order ![Infinix Note 50s 5G+](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png) ### Infinix Note 50s 5G+ set to launch in India with 64MP camera and MediaTek Dimensity 7300 SoC ![Xiaomi X Pro QLED Series sale starts in India: Check price, availability, and more](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png) ### Xiaomi X Pro QLED Series sale starts in India: Check price, availability, and more ![Apple Intelligence AI training](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png) ### Apple plans to train AI using your on-device data without accessing personal content or emails: Report ![CMF Buds 2](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png) ### CMF Buds 2 key features and price revealed ahead of April 28 launch: Details inside keep up with tech ![Facebook](https://images.hindustantimes.com/tech/static/revamp/images/png/tech-facebook.png) ![Twitter](https://images.hindustantimes.com/tech/static/revamp/images/png/tech-twitter.png) ![WhatsApp](https://images.hindustantimes.com/tech/static/revamp/images/png/tech-whatsApp.png) ![Facebook](https://images.hindustantimes.com/tech/static/revamp/images/png/tech-facebook.png) ## Gaming ![Check out these five gaming monitors under ₹20,000,](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png) ### Top 5 gaming monitors under ₹20000 you should consider ![gaming consoles](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png) ### Grab gaming consoles at discounted rates during Amazon Great Indian Festival: Up to 72% off ![Pokémon GO Wild Area 2025](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png) ### Pokémon GO Wild Area 2025 to bring Grimmsnarl family, Shiny Hatenna, and global challenges ![Shade Silver](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png) ### Shade Silver free on Steam for a limited time: Here’s how to get it ![Call of duty](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png) ### Call of Duty: Black Ops 7 skips Switch 2 at launch, release date and price leak ![View all](https://images.hindustantimes.com/tech/static/revamp/images/png/view-all-icon.png) ## Trending News ### Airtel 5G SIM card will now be delivered in 10 minutes with Blinkit- How to order ![Airtel 5G SIM card will now be delivered in 10 minutes with Blinkit- How to order](https://images.livemint.com/static/static/1x1_img.gif) ### Infinix Note 50s 5G+ set to launch in India with 64MP camera and MediaTek Dimensity 7300 SoC ![Infinix Note 50s 5G+](https://images.livemint.com/static/static/1x1_img.gif) ### Xiaomi X Pro QLED Series sale starts in India: Check price, availability, and more ![Xiaomi X Pro QLED Series sale starts in India: Check price, availability, and more](https://images.livemint.com/static/static/1x1_img.gif) ### Apple plans to train AI using your on-device data without accessing personal content or emails: Report ![Apple Intelligence AI training](https://images.livemint.com/static/static/1x1_img.gif) ### CMF Buds 2 key features and price revealed ahead of April 28 launch: Details inside ![CMF Buds 2](https://images.livemint.com/static/static/1x1_img.gif) ## Trending Gadgets Mobiles Laptops Tablets ![HT Tech](https://images.hindustantimes.com/tech/static/revamp/images/png/HT_tech-new.gif) - https://tech.hindustantimes.com/how-to/google-accounts-can-be-accessed-without-passwords-hackers-can-acquire-control-via-cookies-know-how-71704564060819.html